Samsung Mobile com.samsung.android.waterplugin

• CVE-2022-36873 Medium 5.9 Improper restriction of broadcasting Intent in GalaxyStoreBridgePageLinker of?Waterplugin prior to version 2.2.11.22081151 leaks MAC address of the connected Bluetooth device. 0.2%
• CVE-2022-36875 Medium 6.6 Improper restriction of broadcasting Intent in SaWebViewRelayActivity of?Waterplugin prior to version 2.2.11.22081151 allows attacker to access the file without permission. 0.2%