CVE-2022-33710

Improper input validation vulnerability in BillingPackageInsraller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege.

Score

CVSS 3.1 7.8 High

Status

Modified - mobile.security@samsung.com

Published

2022-07-12

Last modified

2024-08-03

Weaknesses

CWE-20, CWE-269

Affected products

• Galaxy Store (Samsung)
• Galaxy Store (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07