CVE-2022-36871: Samsung Pay

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Pending Intent hijacking vulnerability in NotiCenterUtils in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent.

Affected products

• Samsung Samsung Pay: before 5.1.47 (fixed in 5.1.47)
• Samsung Samsung Pay Kr: before 5.0.63 (fixed in 5.0.63)

Published 2022-09-09. Last modified 2026-06-17.