CVE-2022-33709 - Improper input validation vulnerability in ApexPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege

Back Back to CVE browser

HIGH

Improper input validation vulnerability in ApexPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege

Published Jul 11, 2022

7.8

HIGH

CVSS 3.1

EPSS 0.21%

Description

Improper input validation vulnerability in ApexPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege.

Affected products

Vendor Samsung Mobile Product Galaxy Store Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <4.5.41.8

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Samsung Mobile

Galaxy Store

n/a

Version	Status	Constraints
unspecified	affected	<4.5.41.8

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-20

Improper Input Validation

CWE-269

Improper Privilege Management

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-36748
Advisory
https://security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-36748		Advisory
https://security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07		x_refsource_MISCVendor Advisory