Skip to content
OpenAdvisories
Medium · 5.1 CVE-2024-20870 EUVD-2024-18585GHSA-rmxp-h7fr-q442

Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.71.8 allows local attackers to wri…

Published May 7, 2024 · Updated Aug 1, 2024 · Assigned by SamsungMobile

Description

Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.71.8 allows local attackers to write arbitrary files with the privilege of Galaxy Store.

Affected products

VendorProductAffectedFixed
Samsung Mobile Galaxy Store — 4.5.71.8

References