Samsung Galaxy Store App Found Vulnerable to Sneaky App Installs and Fraud
Two security holes have been identified in Samsung's Galaxy Store programme for Android, which a local attacker might use to instal arbitrary apps covertly or lead potential victims to bogus landing pages online.
The vulnerabilities were found by NCC Group and reported to the South Korean chaebol in November and December 2022. They were tracked as CVE-2023-21433 and CVE-2023-21434.
The updates were included in version 4.5.49.8, which was published earlier this month, and Samsung categorized the bu...