Skip to content
OpenAdvisories
Medium · 4.0 CVE-2022-28784 EUVD-2022-33223GHSA-v9mv-xwff-7whp

Path traversal vulnerability in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to list file names in arbitrary directory as…

Published May 3, 2022 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Path traversal vulnerability in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to list file names in arbitrary directory as system user. The patch addresses incorrect implementation of file path validation check logic.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Q(10), R(11), S(12) – < SMR May-2022 Release 1 SMR May-2022 Release 1

References