Samsung Galaxy Store Improper Intent Verification Vulnerability Allowing Arbitrary File Writing

A vulnerability exists in Samsung Galaxy Store versions prior to 4.5.90.7, where improper verification of intent by the broadcast receiver allows local attackers to write arbitrary files with the privileges of Galaxy Store.

Impact

Exploitation of this vulnerability could lead to unauthorized file writing, potentially allowing for the manipulation or creation of files that could be used in further attacks or to disrupt normal application functionality.

Remediation

Users can update to Samsung Galaxy Store version 4.5.90.7 or later to address this vulnerability.