What is the severity of CVE-2023-21514?

CVE-2023-21514 has been classified as a high-severity vulnerability due to its potential to allow remote code execution.

How do I fix CVE-2023-21514?

To fix CVE-2023-21514, update the Galaxy Store to version 4.5.49.9 or later.

What type of attack does CVE-2023-21514 facilitate?

CVE-2023-21514 facilitates attacks that allow execution of JavaScript API calls to install unauthorized APKs from the Galaxy Store.

Which versions of the Galaxy Store are affected by CVE-2023-21514?

CVE-2023-21514 affects Galaxy Store versions prior to 4.5.49.8.

Is there a workaround for CVE-2023-21514 until a patch is applied?

Currently, there is no known workaround for CVE-2023-21514, so updating the software is essential for protection.

Vulnerability/
CVE-2023-21514

critical

9.8

CWE

26/5/2023

15/1/2025

CVE-2023-21514: Input Validation

First published: Fri May 26 2023(Updated: )

Improper scheme validation from InstantPlay Deeplink in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store.

Credit: mobile.security@samsung.com

Affected Software	Affected Version	How to fix
Samsung Galaxy Store	<4.5.49.8

Never miss a vulnerability like this again

Reference Links

https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=01

Frequently Asked Questions

What is the severity of CVE-2023-21514?
CVE-2023-21514 has been classified as a high-severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2023-21514?
To fix CVE-2023-21514, update the Galaxy Store to version 4.5.49.9 or later.
What type of attack does CVE-2023-21514 facilitate?
CVE-2023-21514 facilitates attacks that allow execution of JavaScript API calls to install unauthorized APKs from the Galaxy Store.
Which versions of the Galaxy Store are affected by CVE-2023-21514?
CVE-2023-21514 affects Galaxy Store versions prior to 4.5.49.8.
Is there a workaround for CVE-2023-21514 until a patch is applied?
Currently, there is no known workaround for CVE-2023-21514, so updating the software is essential for protection.

collector/nvd-latest
collector/nvd-index
agent/type
agent/softwarecombine
agent/severity
agent/author
agent/references
agent/tags
agent/description
agent/weakness
agent/first-publish-date
agent/event
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
vendor/samsung
canonical/samsung galaxy store

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2023-21514?
CVE-2023-21514 has been classified as a high-severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2023-21514?
To fix CVE-2023-21514, update the Galaxy Store to version 4.5.49.9 or later.
What type of attack does CVE-2023-21514 facilitate?
CVE-2023-21514 facilitates attacks that allow execution of JavaScript API calls to install unauthorized APKs from the Galaxy Store.
Which versions of the Galaxy Store are affected by CVE-2023-21514?
CVE-2023-21514 affects Galaxy Store versions prior to 4.5.49.8.
Is there a workaround for CVE-2023-21514 until a patch is applied?
Currently, there is no known workaround for CVE-2023-21514, so updating the software is essential for protection.