Input validation

2023-12-0503:15:00

PRIOn knowledge base

www.prio-n.com

improper url validation

galaxy store

javascript api

apk installation

7.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

39.3%

JSON

Improper URL validation from MCSLaunch deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to install APK from Galaxy Store.

CPENameOperatorVersion
galaxy_storelt4.5.64.4

CPE	Name	Operator	Version
	galaxy_store	lt	4.5.64.4

References

security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12