CVE-2018-20135

Samsung Galaxy Apps before 4.4.01.7 is vulnerable: an MITM-empowered attacker can cause the app store API to use a forged load-balancing hostname and bypass app-signature validation, enabling remote code execution on the device. Core issues include an HTTP method that obtains the load-balanced ho...