CVE-2022-28791

Publication date

2022-05-03 19:43:31

Family

Samsung Mobile

State

PUBLISHED

Description

Improper input validation vulnerability in InstallAgent in Galaxy Store prior to version 4.5.41.8 allows attacker to overwrite files stored in a specific path. The patch adds proper protection to prevent overwrite to existing files.