CVE-2023-21514: Input Validation
Published May 26, 2023
·Updated
Improper scheme validation from InstantPlay Deeplink in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store.
Affected Software
1 affected component
Samsung Galaxy Store<4.5.49.8
Event History
May 26, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-21514?
CVE-2023-21514 has been classified as a high-severity vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2023-21514?
To fix CVE-2023-21514, update the Galaxy Store to version 4.5.49.9 or later.
3
What type of attack does CVE-2023-21514 facilitate?
CVE-2023-21514 facilitates attacks that allow execution of JavaScript API calls to install unauthorized APKs from the Galaxy Store.
4
Which versions of the Galaxy Store are affected by CVE-2023-21514?
CVE-2023-21514 affects Galaxy Store versions prior to 4.5.49.8.
5
Is there a workaround for CVE-2023-21514 until a patch is applied?
Currently, there is no known workaround for CVE-2023-21514, so updating the software is essential for protection.