PT-2019-14162 · Samsung · Samsung A3+1
Published
2019-11-14
·
Updated
2020-08-24
·
CVE-2019-15433
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Samsung A3 Android device with a build fingerprint of samsung/a3y17ltedx/a3y17lte:8.0.0/R16NW/A320YDXU4CSB3:user/release-keys
com.samsung.android.themecenter app version 7.0.0.0
Description
The issue concerns a pre-installed app on the Samsung A3 Android device that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device that can obtain signatureOrSystem permissions required by other pre-installed apps that exported their capabilities.
Recommendations
For the Samsung A3 Android device, consider restricting access to the
com.samsung.android.themecenter app until a patch is available.
For the com.samsung.android.themecenter app version 7.0.0.0, avoid using the app installation capability via accessible app components to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability. Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Samsung A3
Com.Samsung.Android.Themecenter