CVE-2024-20822

Implicit intent hijacking vulnerability in AccountActivity of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent.

Score

CVSS 3.1 5.5 Medium

Status

Modified - mobile.security@samsung.com

Published

2024-02-06

Last modified

2025-04-24

Affected products

• Galaxy Store (Samsung)
• Galaxy Store (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=02