Improper Sanitization in Galaxy Store Allows Local Access to Privileged Content Providers
CVE-2023-30705
6.8MEDIUM
Summary
The Galaxy Store is susceptible to an improper sanitization vulnerability, which allows local attackers to exploit unprotected entry points. By leveraging this flaw, attackers can gain access to privileged content providers that are otherwise secured by Galaxy Store permissions. Users are urged to update their Galaxy Store to versions 4.5.56.6 or later to mitigate potential risks.
Affected Version(s)
Galaxy Store 4.5.56.6
References
CVSS V3.1
Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved