CVE-2022-36875: Samsung Galaxy Watch Plugin

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper restriction of broadcasting Intent in SaWebViewRelayActivity of?Waterplugin prior to version 2.2.11.22081151 allows attacker to access the file without permission.

Affected products

• Samsung Galaxy Watch Plugin: before 2.2.11.22081151 (fixed in 2.2.11.22081151)

Published 2022-09-09. Last modified 2026-06-17.