Read the docs
TI-2022-14829 Aliases CVE-2022-33711GHSA-h3qc-9gqr-5pwm

Improper validation of integrity check vulnerability in Samsung USB Driver Windows…

Priority LOW 24CWE-354Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Improper validation of integrity check vulnerability in Samsung USB Driver Windows Installer for Mobile Phones prior to version 1.7.56.0 allows local attackers to delete arbitrary directory using directory junction.

Why it matters now

EPSS 0.00142 3rd percentileScored 2026-11-07
Fix Fixed Samsung USB Driver Windows Installer for Mobile Phones (Samsung Mobile): 1.7.56.0

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SamsungSamsung USB Driver Windows Installer for Mobile Phonesbefore 1.7.56.01.7.56.0Patch availableCNA
  • Samsung USB Driver Windows Installer for Mobile Phones VendorSamsung Affected before 1.7.56.0 Fixed in 1.7.56.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:samsung:android_usb_driver:*:*:*:*:*:windows:*:*before 1.7.56.0VulnerableSamsung
  • cpe:2.3:a:samsung:android_usb_driver:*:*:*:*:*:windows:*:* Versions before 1.7.56.0 Vulnerable ·Samsung

Remediation

  • Fix · CNA Samsung USB Driver Windows Installer for Mobile Phones (Samsung Mobile) Fixed in 1.7.56.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-33711
  2. 2026-10-03 Alias added: GHSA-h3qc-9gqr-5pwm

References

Advisory 1

  • TI-2026-17055 Out-of-bounds read in Samsung Android USB Driver for Windows CVSS 4.0MEDIUM 5.9

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences