CVE-2024-20870: Medium severity samsung galaxy store vulnerability
Published May 7, 2024
·Updated
Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.71.8 allows local attackers to write arbitrary files with the privilege of Galaxy Store.
Affected Software
2 affected components
Samsung Galaxy Store<4.5.71.8
Samsung Galaxy Store<4.5.71.8
Event History
May 7, 2024
CVE Published
via MITRE·04:28 AM
Data Sourced
via MITRE·04:28 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-20870?
CVE-2024-20870 is classified as a high severity vulnerability due to its potential for local attackers to write arbitrary files.
2
How do I fix CVE-2024-20870?
To fix CVE-2024-20870, users should update Galaxy Store to version 4.5.71.8 or later.
3
What are the potential impacts of CVE-2024-20870?
The potential impacts of CVE-2024-20870 include unauthorized file writing within the context of the Galaxy Store application.
4
Who is affected by CVE-2024-20870?
Users of the Samsung Galaxy Store prior to version 4.5.71.8 are affected by CVE-2024-20870.
5
Is there a workaround for CVE-2024-20870?
There is no known workaround for CVE-2024-20870; the only mitigation is to update the application to the latest version.