CVE-2026-21002: Undefined Security Weakness

Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to install arbitrary application...

CVE-2024-34598: Undefined Security Weakness

Improper export of component in GoodLock prior to version 2.2.04.95 allows local attackers to install arbitrary applications from Galaxy Store...

CVE-2025-20895

The CVE-2025-20895 affects Samsung Galaxy Store prior to 4.5.87.6. The issue permits authentication bypass via an alternate path in Galaxy Store, enabling a physical attacker to install arbitrary apps and bypass Setupwizard restrictions. Affected: Galaxy Store versions before 4.5.87.6. Root cause...

CVE-2025-20895: Undefined Security Weakness

Authentication Bypass Using an Alternate Path in Galaxy Store prior to version 4.5.87.6 allows physical attackers to install arbitrary applications to bypass restrictions of Setupwizard...

CVE-2021-25356

An improper caller check vulnerability in Managed Provisioning prior to SMR APR-2021 Release 1 allows unprivileged application to install arbitrary application, grant device admin permission and then delete several installed application...

CVE-2021-25356

CVE-2021-25356 pertains to Samsung’s Managed Provisioning. An improper caller check prior to SMR APR-2021 Release 1 allows an unprivileged application to install arbitrary applications, grant device admin permissions, and subsequently delete multiple installed apps. The issue’s root cause is an i...

PT-2013-4753

Name of the Vulnerable Software and Affected Versions Apple iOS version 6.1.3 Description The issue allows remote attackers to trigger the installation of arbitrary applications via a download-manifest itms-services:// URL. This is possible because the software does not follow redirects during th...