Unrated severityNVD Advisory· Published Dec 5, 2023· Updated Aug 28, 2024

CVE-2023-42581

Description

Improper URL validation from InstantPlay deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to access data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Samsung Mobile/Galaxy Storellm-fuzzy2 versions
<4.5.64.4+ 1 more
- (no CPE)range: <4.5.64.4
- (no CPE)range: 4.5.64.4

Patches

Vulnerability mechanics

References

security.samsungmobile.com/serviceWeb.smsbmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000