Samsung Galaxy Store vulnerabilities
31 vulnerabilities
Known vulnerabilities in Samsung Galaxy Store, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-25499samsung mobilegalaxy store+1
EPSS score0.22%
Intent redirection vulnerability in SamsungAccountSDKSigninActivity of Galaxy Store prior to version 4.5.32.4 allows attacker to access content provider of Galaxy Store.CVE-2025-20951samsunggalaxy_storeEPSS score0.14%
Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.90.7 allows local attackers to write arbitrary files with the privilege of Galaxy Store.CVE-2025-20895samsunggalaxy_storeEPSS score0.20%
Authentication Bypass Using an Alternate Path in Galaxy Store prior to version 4.5.87.6 allows physical attackers to install arbitrary applications to bypass restrictions of Setupwizard.CVE-2025-58483samsunggalaxy_storeEPSS score0.10%
Improper export of android application components in Galaxy Store for Galaxy Watch prior to version 1.0.06.29 allows local attacker to install arbitrary application on Galaxy Store.CVE-2022-22288samsung mobilegalaxy store+1EPSS score0.92%
Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist.CVE-2022-28791samsung mobilegalaxy store+1EPSS score0.22%
Improper input validation vulnerability in InstallAgent in Galaxy Store prior to version 4.5.41.8 allows attacker to overwrite files stored in a specific path. The patch adds proper protection to prevent overwrite to existing files.CVE-2022-28776samsung mobilegalaxy store+1EPSS score0.27%
Improper access control vulnerability in Galaxy Store prior to version 4.5.36.4 allows attacker to install applications from Galaxy Store without user interactions.CVE-2022-28542samsung mobilegalaxy store+1EPSS score0.27%
Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.40.5 allows local attackers to access privileged content providers as Galaxy Store permission.CVE-2022-28544samsung mobilegalaxy store+1EPSS score0.90%
Path traversal vulnerability in unzip method of InstallAgentCommonHelper in Galaxy store prior to version 4.5.40.5 allows attacker to access the file of Galaxy store.CVE-2022-33710samsung mobilegalaxy store+1EPSS score0.21%
Improper input validation vulnerability in BillingPackageInsraller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege.CVE-2022-33709samsung mobilegalaxy store+1EPSS score0.21%
Improper input validation vulnerability in ApexPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege.CVE-2022-33708samsung mobilegalaxy store+1EPSS score0.21%
Improper input validation vulnerability in AppsPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege.CVE-2024-20825samsunggalaxy_storeEPSS score0.17%
Implicit intent hijacking vulnerability in IAP of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent.CVE-2024-20870samsunggalaxy_storeEPSS score0.14%
Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.71.8 allows local attackers to write arbitrary files with the privilege of Galaxy Store.CVE-2024-20823samsunggalaxy_storeEPSS score0.17%
Implicit intent hijacking vulnerability in SamsungAccount of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent.CVE-2024-20822samsunggalaxy_storeEPSS score0.17%
Implicit intent hijacking vulnerability in AccountActivity of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent.CVE-2024-20824samsunggalaxy_storeEPSS score0.17%
Implicit intent hijacking vulnerability in VoiceSearch of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent.CVE-2024-34601samsunggalaxy_storeEPSS score0.13%
Improper verification of intent by broadcast receiver vulnerability in GalaxyStore prior to version 4.5.81.0 allows local attackers to launch unexported activities of GalaxyStore.CVE-2026-21002samsunggalaxy_storeEPSS score0.07%
Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to install arbitrary application.CVE-2026-21001samsunggalaxy_storeEPSS score0.12%
Path traversal in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privilege.