CVE-2024-20853

Improper verification of intent by broadcast receiver vulnerability in ThemeStore prior to 5.3.05.2 allows local attackers to write arbitrary files to sandbox of ThemeStore.

Score

CVSS 3.1 5.1 Medium

Status

Analyzed - mobile.security@samsung.com

Published

2024-04-02

Last modified

2025-08-26

Affected products

• Galaxy Themes (Samsung)
• Themestore (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=04