Improper Access Control Vulnerability in Samsung Gallery for Samsung Devices

CVE-2022-33706

What is CVE-2022-33706?

An improper access control vulnerability exists in Samsung Gallery, which could allow attackers with physical access to the device to manipulate S Pen air gestures and gain access to photos stored on the device. This flaw poses a risk, especially in scenarios where users inadvertently leave their devices unattended, enabling unauthorized users to exploit the vulnerability and view sensitive images.

References