Path traversal

Path traversal vulnerability in unzip method of InstallAgentCommonHelper in Galaxy store prior to version 4.5.40.5 allows attacker to access the file of Galaxy store...

Improper access control

Improper access control vulnerability in Galaxy Store prior to version 4.5.36.4 allows attacker to install applications from Galaxy Store without user interactions...

CVE-2022-28776

Improper access control vulnerability in Galaxy Store prior to version 4.5.36.4 allows attacker to install applications from Galaxy Store without user interactions...

CVE-2022-28776

CVE-2022-28776 affects Samsung Galaxy Store prior to 4.5.36.4. Root cause is improper access control that lets an attacker install applications from Galaxy Store without user interaction. Affected component: Galaxy Store client prior to 4.5.36.4. Impact per sources: attacker could install apps wi...

CVE-2022-28544

Path traversal vulnerability in unzip method of InstallAgentCommonHelper in Galaxy store prior to version 4.5.40.5 allows attacker to access the file of Galaxy store...

CVE-2022-28544

The CVE-2022-28544 entry describes a path traversal flaw in the unzip method of InstallAgentCommonHelper in Samsung Galaxy Store, affecting versions before 4.5.40.5. The root cause is a vulnerability in unzip handling that could allow an attacker to access files within Galaxy Store. Documents con...

CVE-2022-28542

Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.40.5 allows local attackers to access privileged content providers as Galaxy Store permission...

CVE-2022-28542

CVE-2022-28542 : Samsung Galaxy Store before version 4.5.40.5 suffers from improper sanitization of incoming intents. This allows a local attacker to access privileged content providers using Galaxy Store permissions. Root cause is inadequate input sanitization of intents; affected software is Ga...

Samsung Galaxy Store 安全漏洞

Samsung Mobile Samsung Galaxy Store is an application store of Samsung Mobile, a South Korean company. A security vulnerability exists in Galaxy Store versions prior to 4.5.36.4, which stems from an incorrect access control vulnerability. An attacker could exploit the vulnerability to install...

Samsung Galaxy Store 安全漏洞

Samsung Mobile Samsung Galaxy Store is an application store of Samsung Mobile, a South Korean company. A security vulnerability exists in Galaxy Store versions prior to 4.5.40.5, which stems from incorrect cleaning of incoming intent. A local attacker could exploit the vulnerability to access...

Samsung Galaxy Store路径遍历漏洞

Samsung Mobile Samsung Galaxy Store is an application store of Samsung Mobile, a South Korean company. A security vulnerability exists in Galaxy store versions prior to 4.5.40.5, which stems from a path traversal vulnerability in the unzip method of InstallAgentCommonHelper. An attacker could...

(Pwn2Own) Samsung Galaxy S21 Open Redirect Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S21 phones. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Gala...

CVE-2022-22288

Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist...

CVE-2022-22288

Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist...

CVE-2022-22288

Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist...

Authorization

Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist...

SAMSUNG Galaxy Store 安全漏洞

SAMSUNG Galaxy Store is an application store by the South Korean company Samsung SAMSUNG. A security vulnerability previously existed in SAMSUNG Galaxy Store 4.5.36.5 that allowed remote application installation whitelisting...

CVE-2022-22288

CVE-2022-22288 affects Samsung Galaxy Store; vulnerability is an improper authorization flaw in Galaxy Store prior to version 4.5.36.5 that enables remote installation from the allowlist. Root cause per sources is improper authorization allowing an attacker to trigger installations without proper...

CVE-2022-22288

Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist...

PT-2022-15332 · Samsung · Galaxy Store

Name of the Vulnerable Software and Affected Versions: Galaxy Store versions prior to 4.5.36.5 Description: The issue is related to an improper authorization vulnerability. It allows for remote app installation from the allowlist. Recommendations: For Galaxy Store versions prior to 4.5.36.5, upda...