Description
Improper scheme validation from InstantPlay Deeplink in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Samsung Mobile | Galaxy Store | unspecified – < 4.5.49.8 | 4.5.49.8 |
Advisories 1
- WID-SEC-2023-1344 Samsung Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 31, 2023