Skip to content
OpenAdvisories
Medium · 6.8 CVE-2022-28542 EUVD-2022-32984GHSA-4h5x-x4pf-rgvw

Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.40.5 allows local attackers to access privileged content prov…

Published Apr 11, 2022 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Description

Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.40.5 allows local attackers to access privileged content providers as Galaxy Store permission.

Affected products

VendorProductAffectedFixed
Samsung Mobile Galaxy Store - – < 4.5.40.5 4.5.40.5

References