Code injection in Samsung Bixby Routines
Priority LOW 31CWE-94Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-94.
Summary
A vulnerability using PendingIntent in Bixby Routines prior to version 3.1.21.8 in Android R(11.0) and 2.6.30.5 in Android Q(10.0) allows attackers to execute privileged action by hijacking and modifying the intent.
Why it matters now
EPSS 0.00285 21st percentileScored 2026-11-07
Fix Fixed Bixby Routines (Samsung Mobile): 3.1.21.8 in Android R(11.0) and 2.6.30.5 in Android Q(10.0)
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Samsung | Bixby Routines | - to before 3.1.21.8 in Android R(11.0) and 2.6.30.5 in Android Q(10.0) | 3.1.21.8 in Android R(11.0) and 2.6.30.5 in Android Q(10.0) | Patch available | CNA |
- Bixby Routines VendorSamsung Affected - to before 3.1.21.8 in Android R(11.0) and 2.6.30.5 in Android Q(10.0) Fixed in 3.1.21.8 in Android R(11.0) and 2.6.30.5 in Android Q(10.0) Patch available CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:samsung:bixby_routines:*:*:*:*:*:*:*:* | before 3.1.21.8 | Vulnerable | Samsung |
| cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* | 11.0 | Running on | |
| cpe:2.3:a:samsung:bixby_routines:*:*:*:*:*:*:*:* | before 2.6.30.5 | Vulnerable | Samsung |
| cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:* | 10.0 | Running on |
- cpe:2.3:a:samsung:bixby_routines:*:*:*:*:*:*:*:* Versions before 3.1.21.8 Vulnerable ·Samsung
- cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* Versions 11.0 Running on ·Google
- cpe:2.3:a:samsung:bixby_routines:*:*:*:*:*:*:*:* Versions before 2.6.30.5 Vulnerable ·Samsung
- cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:* Versions 10.0 Running on ·Google
Remediation
- Fix · CNA Bixby Routines (Samsung Mobile) Fixed in 3.1.21.8 in Android R(11.0) and 2.6.30.5 in Android Q(10.0)
Timeline
- 2026-10-02 Threatist record created from CVE-2022-22286
- 2026-10-03 Alias added: GHSA-2cr4-fx56-fvmc
References
Sources
- CVE-2022-22286 · CVE Program
- CVE-2022-22286 · NVD
- FIRST EPSS
- GHSA-2cr4-fx56-fvmc · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences