CVE-2022-36829: Samsung Charm Firmware

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permission via implicit intent.

Affected products

• Samsung Charm Firmware: before 1.2.3 (fixed in 1.2.3)

Published 2022-08-05. Last modified 2026-06-17.