CVE-2019-15446: High severity samsung galaxy s7 vulnerability
The Samsung S7 Android device with a build fingerprint of samsung/heroltexx/herolte:8.0.0/R16NW/G930FXXU3ESAC:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000000, versionName=7.0.0.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-15446?
CVE-2019-15446 is considered a high severity vulnerability due to its potential to allow unauthorized access to sensitive information.
How do I fix CVE-2019-15446?
To fix CVE-2019-15446, users should update their Samsung Galaxy S7 firmware to the latest version provided by Samsung.
What causes CVE-2019-15446?
CVE-2019-15446 is caused by a flaw in the pre-installed com.samsung.android.themecenter application that allows other apps to access sensitive data.
Which devices are affected by CVE-2019-15446?
CVE-2019-15446 specifically affects the Samsung Galaxy S7 running Android 8.0.0 with specific build fingerprints.
Is CVE-2019-15446 exploitable remotely?
Yes, CVE-2019-15446 can be exploited remotely by malicious applications on the affected device.