Skip to content
OpenAdvisories
Medium · 5.1 CVE-2025-20951 EUVD-2025-10074GHSA-w5jv-4chj-9gqx

Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.90.7 allows local attackers to wri…

Published Apr 8, 2025 · Updated Apr 8, 2025 · Assigned by SamsungMobile

Description

Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.90.7 allows local attackers to write arbitrary files with the privilege of Galaxy Store.

Affected products

VendorProductAffectedFixed
Samsung Mobile Galaxy Store — 4.5.90.7

References