Skip to content
OpenAdvisories
Medium · 6.2 CVE-2022-28791 EUVD-2022-33230GHSA-3247-33gc-rgpq

Improper input validation vulnerability in InstallAgent in Galaxy Store prior to version 4.5.41.8 allows attacker to overwrite files stored…

Published May 3, 2022 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Description

Improper input validation vulnerability in InstallAgent in Galaxy Store prior to version 4.5.41.8 allows attacker to overwrite files stored in a specific path. The patch adds proper protection to prevent overwrite to existing files.

Affected products

VendorProductAffectedFixed
Samsung Mobile Galaxy Store - – < 4.5.41.3 4.5.41.3

References