CVE-2022-28542

Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.40.5 allows local attackers to access privileged content providers as Galaxy Store permission.

Score

CVSS 3.1 6.8 Medium

Status

Modified - mobile.security@samsung.com

Published

2022-04-11

Last modified

2024-08-03

Weaknesses

CWE-284, CWE-863

Affected products

• Galaxy Store (Samsung)
• Galaxy Store (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4