Improper Permissions Vulnerability in Samsung Data Store

CVE-2023-42578

What is CVE-2023-42578?

The Samsung Data Store has a vulnerability that arises from improper handling of insufficient permissions or privileges. This flaw allows remote attackers to gain unauthorized access to sensitive location information, potentially leading to privacy infringements and unauthorized data collection. Users are advised to update to version 5.2.00.7 or later to mitigate this security risk.

References