CVE-2022-33710

2022-07-1113:37:17

CWE-20

Samsung Mobile

www.cve.org

0.0004 Low

EPSS

Percentile

5.1%

JSON

Improper input validation vulnerability in BillingPackageInsraller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege.

CNA Affected

[
  {
    "product": "Galaxy Store",
    "vendor": "Samsung Mobile",
    "versions": [
      {
        "lessThan": "4.5.41.8",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2022-33710