CVE-2023-42580

Improper URL validation from MCSLaunch deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to install APK from Galaxy Store...

CVE-2023-42580

CVE-2023-42580 describes improper URL validation in Samsung Galaxy Store’s MCSLaunch deeplink, allowing a JavaScript API to install APKs from Galaxy Store. Affected: Galaxy Store versions before 4.5.64.4. Root cause: URL validation flaw in the deeplink handling. Impact: potential remote code/inst...

CVE-2023-42580: Undefined Security Weakness

Improper URL validation from MCSLaunch deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to install APK from Galaxy Store...

PT-2023-28450

Name of the Vulnerable Software and Affected Versions Galaxy Store versions prior to 4.5.64.4 Description The issue is related to improper URL validation from MCSLaunch deeplink in Galaxy Store, allowing attackers to execute JavaScript API and install APK from Galaxy Store. This can lead to remot...