Skip to content
Sign in
5.1 Medium

CVE-2024-20870 Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.71.8 allows…

Description

Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.71.8 allows local attackers to write arbitrary files with the privilege of Galaxy Store.

Affected products and versions

Product Affected versions Fixed in
Galaxy Store 4.5 earliest → < 4.5.71.8 4.5.71.8
galaxy_store 4.5.71.8 No fix stated

Other CVEs of Galaxy Store

The 29 CVEs of Galaxy Store →
CVE-2026-21002 Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to… 5.9 Medium CVE-2026-21001 Path traversal in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store… 5.9 Medium CVE-2026-21000 Improper access control in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store… 7.0 High CVE-2026-20976 Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute arbitrary script 5.1 Medium
Track this CVE