Samsung Internet Improper Permission Handling Vulnerability in SyncClientProvider on Non-Samsung Devices

A vulnerability exists in Samsung Internet, specifically in the SyncClientProvider component, on non-Samsung devices running versions prior to 28.0.0.59. This vulnerability allows local attackers to read and write arbitrary files due to improper handling of permissions. The issue has been addressed in version 28.0.0.59.

Impact

Exploitation of this vulnerability could lead to unauthorized access to read and write files on the affected device.

Remediation

Users can update to Samsung Internet version 28.0.0.59 or later to address this vulnerability.