Privilege Escalation in Samsung Members Application

CVE-2018-11614

What is CVE-2018-11614?

A remote privilege escalation vulnerability exists in the Samsung Members application, enabling attackers to escalate privileges on vulnerable installations. This flaw arises from improper handling of Intents, allowing an attacker who can execute low-privileged code to send an Intent that would otherwise be inaccessible. By exploiting this vulnerability, an attacker can gain access to resources that would typically be protected, exposing sensitive information and potentially compromising system integrity.

References