Samsung MotionPhoto Improper Access Control Vulnerability in MPLocalService

A vulnerability exists in the MotionPhoto application, specifically in the MPLocalService component, prior to version 4.1.51. This vulnerability allows local attackers to initiate privileged services due to improper access control. The issue has been acknowledged by a researcher from the Shuffle Team.

Impact

Exploitation of this vulnerability could lead to unauthorized initiation of privileged services, potentially allowing local attackers to perform actions or access resources that are normally restricted.

Remediation

Users can update to MotionPhoto version 4.1.51 or later to address this vulnerability.