CVE-2022-39858: Samsung Factorycamera

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Path traversal vulnerability in AtBroadcastReceiver in FactoryCamera prior to version 3.5.51 allows attackers to write arbitrary file as FactoryCamera privilege.

Affected products

• Samsung Factorycamera: before 3.5.51 (fixed in 3.5.51)

Published 2022-10-07. Last modified 2026-06-17.