CVE-2019-15437: High severity samsung xcover 4 firmware vulnerability
The Samsung XCover4 Android device with a build fingerprint of samsung/xcover4ltexx/xcover4lte:8.1.0/M1AJQ/G390FXXU3BSA2:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000100, versionName=7.0.1.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-15437?
CVE-2019-15437 is classified as a high severity vulnerability due to its potential to allow unauthorized access to sensitive data.
How do I fix CVE-2019-15437?
To fix CVE-2019-15437, ensure that your Samsung XCover4 device is updated with the latest security patches provided by Samsung.
What is the impact of CVE-2019-15437 on my device?
The impact of CVE-2019-15437 includes the risk of exposure to malicious apps gaining access to restricted data.
Which devices are affected by CVE-2019-15437?
CVE-2019-15437 specifically affects the Samsung Galaxy XCover4 running certain versions of Android with the pre-installed app com.samsung.android.themecenter.
Is there a workaround for CVE-2019-15437?
There is currently no known workaround for CVE-2019-15437 other than applying the official firmware updates from Samsung.