PT-2019-14174 · Samsung · Samsung S7+1
Published
2019-11-14
·
Updated
2020-08-24
·
CVE-2019-15445
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Samsung S7 Android device with a build fingerprint of samsung/heroltexx/herolte:8.0.0/R16NW/G930FXXS4ESC3:user/release-keys
com.samsung.android.themecenter app version 7.0.0.0
Description
The issue concerns a pre-installed app on the Samsung S7 Android device that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device that can obtain signatureOrSystem permissions required by other pre-installed apps that exported their capabilities.
Recommendations
For the Samsung S7 Android device, consider restricting access to the
com.samsung.android.themecenter app until a patch is available.
For the com.samsung.android.themecenter app version 7.0.0.0, avoid using the app installation capability via the accessible app component to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability. Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Samsung S7
Com.Samsung.Android.Themecenter