Code injection in Samsung Reminder
Priority LOW 31CWE-94Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-94.
Summary
A vulnerability using PendingIntent in Reminder prior to version 12.2.05.0 in Android R(11.0) and 12.3.02.1000 in Android S(12.0) allows attackers to execute privileged action by hijacking and modifying the intent.
Why it matters now
EPSS 0.00285 21st percentileScored 2026-11-07
Fix Fixed Reminder (Samsung Mobile): 12.2.05.0 in Android R(11.0) and 12.3.02.1000 in Android S(12.0)
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Samsung | Reminder | - to before 12.2.05.0 in Android R(11.0) and 12.3.02.1000 in Android S(12.0) | 12.2.05.0 in Android R(11.0) and 12.3.02.1000 in Android S(12.0) | Patch available | CNA |
- Reminder VendorSamsung Affected - to before 12.2.05.0 in Android R(11.0) and 12.3.02.1000 in Android S(12.0) Fixed in 12.2.05.0 in Android R(11.0) and 12.3.02.1000 in Android S(12.0) Patch available CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:samsung:reminder:*:*:*:*:*:*:*:* | before 12.2.05.0 | Vulnerable | Samsung |
| cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* | 11.0 | Running on | |
| cpe:2.3:a:samsung:reminder:*:*:*:*:*:*:*:* | before 12.3.02.1000 | Vulnerable | Samsung |
| cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* | 12.0 | Running on |
- cpe:2.3:a:samsung:reminder:*:*:*:*:*:*:*:* Versions before 12.2.05.0 Vulnerable ·Samsung
- cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* Versions 11.0 Running on ·Google
- cpe:2.3:a:samsung:reminder:*:*:*:*:*:*:*:* Versions before 12.3.02.1000 Vulnerable ·Samsung
- cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* Versions 12.0 Running on ·Google
Remediation
- Fix · CNA Reminder (Samsung Mobile) Fixed in 12.2.05.0 in Android R(11.0) and 12.3.02.1000 in Android S(12.0)
Timeline
- 2026-10-02 Threatist record created from CVE-2022-22285
- 2026-10-03 Alias added: GHSA-4m5x-p265-j28q
References
More Samsung Reminder vulnerabilities
- TI-2022-18870 Sensitive information in log files in Samsung Reminder CVSS 3.1MEDIUM 5.9
- TI-2022-07496 Improper access control in Samsung Reminder CVSS 3.1MEDIUM 5.3
Sources
- CVE-2022-22285 · CVE Program
- CVE-2022-22285 · NVD
- FIRST EPSS
- GHSA-4m5x-p265-j28q · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences