CVE-2022-28544

Path traversal vulnerability in unzip method of InstallAgentCommonHelper in Galaxy store prior to version 4.5.40.5 allows attacker to access the file of Galaxy store.

Score

CVSS 3.1 6.2 Medium

Status

Modified - mobile.security@samsung.com

Published

2022-04-11

Last modified

2024-08-03

Weaknesses

CWE-22

Affected products

• Galaxy Store (Samsung)
• Galaxy Store (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4