Code injection

The SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices relies on an HTTP connection to the skslm.swiftkey.net server, which allows man-in-the-middle attackers to write to language-pack files by modifying an HTTP response. NOTE: CVE-2015-4640 exploitatio...

CVE-2015-4641

Affected: Samsung Galaxy S4, S4 Mini, S5, S6 with SwiftKey language-pack update. Vulnerability: Directory traversal in the SwiftKey language-pack update implementation that uses the skslm.swiftkey.net domain. Cause: crafted ZIP entry containing a .. path can be exploited to write to arbitrary fil...