Improper Input Sanitization in Samsung Galaxy Store

CVE-2022-28542

Summary

The Galaxy Store prior to version 4.5.40.5 has a vulnerability that stems from improper sanitization of incoming intents. This flaw enables local attackers to exploit the application, potentially granting them unauthorized access to privileged content providers that are normally secured by Galaxy Store permissions. Due to this vulnerability, sensitive user data may be exposed, leading to further security risks.

References