Read the docs
TI-2022-11406 Aliases CVE-2022-28779GHSA-j8rh-75hp-7prv

Uncontrolled search path in Samsung Android USB Driver windows installer

Priority LOW 34CWE-427Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-427.

Summary

Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code.

Why it matters now

EPSS 0.00347 28th percentileScored 2026-11-07
Fix Fixed Samsung Android USB Driver windows installer (Samsung Mobile): 1.7.50

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SamsungSamsung Android USB Driver windows installer- to before 1.7.501.7.50Patch availableCNA
  • Samsung Android USB Driver windows installer VendorSamsung Affected - to before 1.7.50 Fixed in 1.7.50 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:samsung:android_usb_driver_windows_installer:*:*:*:*:*:*:*:*before 1.7.50VulnerableSamsung
  • cpe:2.3:a:samsung:android_usb_driver_windows_installer:*:*:*:*:*:*:*:* Versions before 1.7.50 Vulnerable ·Samsung

Remediation

  • Fix · CNA Samsung Android USB Driver windows installer (Samsung Mobile) Fixed in 1.7.50

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-28779
  2. 2026-10-03 Alias added: GHSA-j8rh-75hp-7prv

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences