Shai Shapira

**Name of the Vulnerable Software and Affected Versions** Samsung Flow for Android versions prior to 4.9.04 **Description** The issue is related to an improper cryptographic implementation, allowing adjacent attackers to decrypt encrypted messages or inject commands. **Recommendations** For versions prior to 4.9.04, update to version 4.9.04 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Samsung Flow for PC version 4.9.14.0 **Description** The issue is related to an improper cryptographic implementation, allowing adjacent attackers to decrypt encrypted messages or inject commands. **Recommendations** For Samsung Flow for PC version 4.9.14.0, update to a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Samsung Flow Windows application versions prior to 4.8.5.0 **Description** A missing input validation in the Samsung Flow Windows application allows attackers to overwrite arbitrary files in the Windows known folders. **Recommendations** For versions prior to 4.8.5.0, update to version 4.8.5.0 or later to resolve the issue.