Skip to content
OpenAdvisories
Low · 3.2 CVE-2025-20895 EUVD-2025-2208GHSA-j9r9-fxgw-q3h7

Authentication Bypass Using an Alternate Path in Galaxy Store prior to version 4.5.87.6 allows physical attackers to install arbitrary appl…

Published Feb 4, 2025 · Updated Feb 4, 2025 · Assigned by SamsungMobile

Description

Authentication Bypass Using an Alternate Path in Galaxy Store prior to version 4.5.87.6 allows physical attackers to install arbitrary applications to bypass restrictions of Setupwizard.

Affected products

VendorProductAffectedFixed
Samsung Mobile Galaxy Store — 4.5.87.6

References