CVE-2019-15445: High severity samsung galaxy s7 vulnerability
The Samsung S7 Android device with a build fingerprint of samsung/heroltexx/herolte:8.0.0/R16NW/G930FXXS4ESC3:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000000, versionName=7.0.0.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-15445?
CVE-2019-15445 has been rated as a medium severity vulnerability affecting the Samsung Galaxy S7.
How do I fix CVE-2019-15445?
To mitigate CVE-2019-15445, users should update their Samsung Galaxy S7 device to the latest firmware version that addresses this vulnerability.
What devices are affected by CVE-2019-15445?
CVE-2019-15445 specifically affects the Samsung Galaxy S7 with the mentioned build fingerprint and the pre-installed Theme Center app.
What type of vulnerability is CVE-2019-15445?
CVE-2019-15445 is a vulnerability that can allow other pre-installed applications to interact inappropriately with the Theme Center app.
Can CVE-2019-15445 be exploited remotely?
CVE-2019-15445 requires local access to the device for potential exploitation, making remote exploitation unlikely.