CVE-2022-27837: Samsung Accessibility

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R(11.0) and 13.0.1.1 in Android S(12.0) allows attacker to access the file with system privilege.

Affected products

• Samsung Accessibility: before 12.5.3.2 (fixed in 12.5.3.2); before 13.0.1.1 (fixed in 13.0.1.1)

Published 2022-04-11. Last modified 2026-06-17.