CVE-2023-42580: Input Validation
Published Dec 5, 2023
·Updated
Improper URL validation from MCSLaunch deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to install APK from Galaxy Store.
Affected Software
1 affected component
Samsung Galaxy Store<4.5.64.4
Event History
Dec 5, 2023
CVE Published
02:44 AM
Data Sourced
02:44 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-42580?
CVE-2023-42580 is rated as a critical vulnerability due to improper URL validation allowing arbitrary APK installations.
2
How do I fix CVE-2023-42580?
To mitigate CVE-2023-42580, update the Galaxy Store to version 4.5.64.4 or later.
3
What are the risks of CVE-2023-42580?
CVE-2023-42580 allows attackers to execute JavaScript API calls which could lead to unauthorized APK installations.
4
Which versions of Galaxy Store are affected by CVE-2023-42580?
CVE-2023-42580 affects all versions of Galaxy Store prior to 4.5.64.4.
5
Is CVE-2023-42580 related to any specific devices?
CVE-2023-42580 pertains specifically to the Samsung Galaxy Store and impacts devices using versions earlier than 4.5.64.4.