CVE-2025-58483

Medium CVSS: 5.9

Improper export of android application components in Galaxy Store for Galaxy Watch prior to version 1.0.06.29 allows local attacker to install arbitrary application on Galaxy Store.

Vendor

Samsung

Product

Galaxy Store

CWE

NVD-CWE-Other

Yayın Tarihi

2025-12-02 02:15:48

Güncelleme

2025-12-04 18:11:21

Source Identifier

mobile.security@samsung.com

KEV Date Added

Kategoriler

NVD-CWE-Other Galaxy Store MEDIUM Samsung 2025

Referanslar

https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=12

Benzer Kayıtlar

High

CVE-2026-21000

Improper access control in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store…

Medium

CVE-2026-21001

Path traversal in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privileg…

Medium

CVE-2026-21002

Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to inst…

Medium

CVE-2026-21004

Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of serv…

High

CVE-2026-21005

Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Sm…

Medium

CVE-2026-20992

Improper authorization in Settings prior to SMR Mar-2026 Release 1 allows local attacker to disable configuring the back…