App Installation Vulnerability in Samsung J7 Neo Android Devices
CVE-2019-15461

7.8HIGH

Key Information:

Vendor
Samsung
Status
Galaxy J7 Neo Firmware
Vendor
CVE Published:
14 November 2019

Summary

The Samsung J7 Neo Android device has a vulnerability involving a pre-installed application called com.samsung.android.themecenter. This app can inadvertently allow other pre-installed applications to install additional apps without proper user consent. Any app that possesses signature or system permissions can leverage this flaw, posing risks of unauthorized app installations and potential security breaches. Users of affected devices should ensure security measures are in place to mitigate the risk associated with this vulnerability.

References

https://www.kryptowire.com/android-firmware-2019/
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.