Privilege Escalation Vulnerability in Samsung Galaxy Apps

CVE-2018-10500

Summary

This vulnerability permits local attackers to escalate privileges on installations of Samsung Galaxy Apps. To exploit this flaw, the attacker must have previously executed low-privileged code on the device. The vulnerability arises from improper handling of push messages, allowing an attacker to start an activity with controlled arguments, potentially granting access to resources typically guarded from the application. This issue was acknowledged under advisory ZDI-CAN-5331.

References