Improper Sanitization in Galaxy Store Allows Local Access to Privileged Content Providers
CVE-2023-30705

6.8MEDIUM

Key Information:

Vendor
Samsung
Vendor
CVE Published:
10 August 2023

Summary

The Galaxy Store is susceptible to an improper sanitization vulnerability, which allows local attackers to exploit unprotected entry points. By leveraging this flaw, attackers can gain access to privileged content providers that are otherwise secured by Galaxy Store permissions. Users are urged to update their Galaxy Store to versions 4.5.56.6 or later to mitigate potential risks.

Affected Version(s)

Galaxy Store 4.5.56.6

References

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.