Improper authorization in Samsung Camera
Priority LOW 25CWE-285Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass, Spoofing
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-285 and CWE-601.
Summary
Intent redirection vulnerability using implict intent in Camera prior to versions 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Android S(12) allows attacker to get sensitive information.
Why it matters now
EPSS 0.00742 54th percentileScored 2026-11-07
Fix Fixed Camera (Samsung Mobile): 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11 +1
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Samsung | Camera | before 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Android S(12) | 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Android S(12) | Patch available | CNA |
- Camera VendorSamsung Affected before 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Android S(12) Fixed in 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Android S(12) Patch available CNA
CPE configurations NVD · 2
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:samsung:camera:*:*:*:*:*:*:*:* | before 12.0.0.98; after 12.0.01.0, before 12.0.01.64; after 12.0.3.0, before 12.0.3.19; after 12.0.3.19, before 12.0.3.23; after 12.0.6.0, before 12.0.6.11 | Vulnerable | Samsung |
| cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* | 12.0 | Running on |
- cpe:2.3:a:samsung:camera:*:*:*:*:*:*:*:* Versions before 12.0.0.98; after 12.0.01.0, before 12.0.01.64; after 12.0.3.0, before 12.0.3.19; after 12.0.3.19, before 12.0.3.23; after 12.0.6.0, before 12.0.6.11 Vulnerable ·Samsung
- cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* Versions 12.0 Running on ·Google
Remediation
- Fix · CNA Camera (Samsung Mobile) Fixed in 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Android S(12)
Timeline
- 2026-10-02 Threatist record created from CVE-2022-33712
- 2026-10-03 Alias added: GHSA-pw63-hqfr-fqmq
References
More Samsung Camera vulnerabilities
- TI-2023-07883 Missing authorization vulnerability in Camera prior to versions 11.1.02.18 in Android 11… CVSS 3.1MEDIUM 6.1
- TI-2022-07960 Improper input validation in Samsung Camera CVSS 3.1MEDIUM 6.2
- TI-2024-13648 Improper handling of insufficient privileges vulnerability in Samsung Camera prior to… CVSS 3.1MEDIUM 5.9
- TI-2023-14544 Implicit intent hijacking vulnerability in Camera prior to versions 11.0.16.43 in Android… CVSS 3.1MEDIUM 5.5
- TI-2026-17031 Improper access control in Samsung Camera prior to version 16.5.00.28 allows local… CVSS 4.0MEDIUM 5.1
Sources
- CVE-2022-33712 · CVE Program
- CVE-2022-33712 · NVD
- FIRST EPSS
- GHSA-pw63-hqfr-fqmq · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences