Skip to content
CVE PROGRAM SOURCE RECORD6.2 Medium

CVE-2022-28791

Improper input validation vulnerability in InstallAgent in Galaxy Store prior to version 4.5.41.8 allows attacker to overwrite files stored in a specific path. The patch adds prope

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Samsung Mobile

Description

Improper input validation vulnerability in InstallAgent in Galaxy Store prior to version 4.5.41.8 allows attacker to overwrite files stored in a specific path. The patch adds proper protection to prevent overwrite to existing files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Samsung Mobile Galaxy Store

  • - to < 4.5.41.3affected

References