Skip to content

Known vulnerabilities in Samsung Mobile Galaxy Store

Is your version affected?

CVE Summary Score Published
CVE-2026-21002 Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to… 5.9 Medium Mar 16, 2026
CVE-2026-21001 Path traversal in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store… 5.9 Medium Mar 16, 2026
CVE-2026-21000 Improper access control in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store… 7.0 High Mar 16, 2026
CVE-2026-20976 Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute arbitrary script 5.1 Medium Jan 9, 2026
CVE-2023-21483 Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access… 6.4 Medium Sep 3, 2025
CVE-2025-20951 Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.90.7 allows… 5.1 Medium Apr 8, 2025
CVE-2025-20895 Authentication Bypass Using an Alternate Path in Galaxy Store prior to version 4.5.87.6 allows physical attackers to… 3.2 Low Feb 4, 2025
CVE-2024-20870 Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.71.8 allows… 5.1 Medium May 7, 2024
CVE-2024-20825 Implicit intent hijacking vulnerability in IAP of Galaxy Store prior to version 4.5.63.6 allows local attackers to… 5.5 Medium Feb 6, 2024
CVE-2024-20824 Implicit intent hijacking vulnerability in VoiceSearch of Galaxy Store prior to version 4.5.63.6 allows local… 5.5 Medium Feb 6, 2024
CVE-2024-20823 Implicit intent hijacking vulnerability in SamsungAccount of Galaxy Store prior to version 4.5.63.6 allows local… 5.5 Medium Feb 6, 2024
CVE-2024-20822 Implicit intent hijacking vulnerability in AccountActivity of Galaxy Store prior to version 4.5.63.6 allows local… 5.5 Medium Feb 6, 2024
CVE-2023-42581 Improper URL validation from InstantPlay deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to… 7.5 High Dec 5, 2023
CVE-2023-42580 Improper URL validation from MCSLaunch deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute… 7.5 High Dec 5, 2023
CVE-2023-30705 Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.56.6?allows local attackers to access… 6.8 Medium Aug 10, 2023
CVE-2023-21516 XSS vulnerability from InstantPlay in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript… 7.5 High May 26, 2023
CVE-2023-21515 InstantPlay which included vulnerable script which could execute javascript in Galaxy Store prior to version 4.5.49.8… 7.5 High May 26, 2023
CVE-2023-21514 Improper scheme validation from InstantPlay Deeplink in Galaxy Store prior to version 4.5.49.8 allows attackers to… 7.5 High May 26, 2023
CVE-2023-21434 Improper input validation vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to execute… 6.2 Medium Feb 9, 2023
CVE-2023-21433 Improper access control vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to install… 7.8 High Feb 9, 2023
CVE-2022-33710 Improper input validation vulnerability in BillingPackageInsraller in Galaxy Store prior to version 4.5.41.8 allows… Not rated Jul 11, 2022
CVE-2022-33709 Improper input validation vulnerability in ApexPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local… Not rated Jul 11, 2022
CVE-2022-33708 Improper input validation vulnerability in AppsPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local… Not rated Jul 11, 2022
CVE-2022-28791 Improper input validation vulnerability in InstallAgent in Galaxy Store prior to version 4.5.41.8 allows attacker to… 6.2 Medium May 3, 2022
CVE-2022-28776 Improper access control vulnerability in Galaxy Store prior to version 4.5.36.4 allows attacker to install… 5.9 Medium Apr 11, 2022

Other Samsung Mobile products