Samsung Camera Missing Authorization Vulnerability Allowing Unauthorized Package Installation

A missing authorization vulnerability has been identified in the Samsung Camera application, affecting versions prior to 11.1.02.18 on Android 11, 12.1.03.8 on Android 12, and 13.1.01.4 on Android 13. This vulnerability allows physical attackers to install packages through the Galaxy Store before the Setup Wizard is completed.

Impact

Exploitation of this vulnerability could lead to unauthorized package installations on the device.

Remediation

Users can update to Samsung Camera version 11.1.02.18 on Android 11, 12.1.03.8 on Android 12, or 13.1.01.4 on Android 13 to address this vulnerability.