CVE-2022-33708: Input Validation
Published Jul 11, 2022
·Updated
Improper input validation vulnerability in AppsPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege.
Affected Software
1 affected component
Samsung Galaxy Store<4.5.41.8
Event History
Jul 11, 2022
CVE Published
via MITRE·01:36 PM
Data Sourced
via MITRE·01:36 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-33708?
CVE-2022-33708 is classified as a high-severity vulnerability due to improper input validation allowing activity launches with elevated privileges.
2
How do I fix CVE-2022-33708?
To fix CVE-2022-33708, update the Galaxy Store to version 4.5.41.8 or later.
3
Who is affected by CVE-2022-33708?
CVE-2022-33708 affects users of Samsung Galaxy Store prior to version 4.5.41.8.
4
What type of attacks can be executed due to CVE-2022-33708?
Local attackers can exploit CVE-2022-33708 to launch activities with Galaxy Store privileges.
5
Is there a workaround for CVE-2022-33708?
There is no known workaround for CVE-2022-33708; the only mitigation is to update to the latest software version.