Samsung Internet Improper Permission Handling Vulnerability in ClientProvider on Non-Samsung Devices

A vulnerability exists in Samsung Internet's ClientProvider, specifically in versions prior to 28.0.0.59, on non-Samsung devices. This vulnerability arises from improper handling of permissions, allowing local attackers to read and write arbitrary files. The issue has been addressed in version 28.0.0.59.

Impact

Exploitation of this vulnerability could lead to unauthorized access to read and write files, potentially allowing for the manipulation or exfiltration of sensitive data.

Remediation

Users can update to Samsung Internet version 28.0.0.59 to address this vulnerability.