Samsung’s latest Galaxy Store update fixes a vulnerability that allows hackers to install apps without notifying users
Samsung has released an update to the Galaxy Store app to fix vulnerabilities that could potentially allow malicious sources to install apps without user permission. Two vulnerabilities have reportedly been detected on the Galaxy Store by a research team. These vulnerabilities only affect handsets running Android 12 or earlier. Android 13 users are not affected by this. Users can open the Galaxy Store on their phone and download and install the latest version 184.108.40.206 of the Galaxy Store app.
The report says that a pre-installed rouge app or malicious hyperlink in Google Chrome on Galaxy phones running Android 12 bypasses Samsung’s URL filter and installs any app available on the Galaxy Store. Moreover, they even launch an attacker-controlled web view. Notably, these vulnerabilities only affect Galaxy phones running Android 12, while phones supported by Android 13 are safe.
Therefore, to fix these bugs, Samsung has rolled out an updated version of the Galaxy Store app (version 220.127.116.11). Users can go to Galaxy Store settings on their phone, download and install the latest version of the app. Samsung has classified the aforementioned vulnerabilities as moderate risks.
Galaxy Store was reported to distribute rogue apps asking for excessive permissions, including phone access, earlier as well. In December 2021, different clones of Showbox movie hacking apps available on Galaxy Store were spotted infecting devices with malware. Tipster Max Weinbach reported a similar type of problem that was previously discovered on Huawei phones. He shared that installations of Showbox-based apps from the Galaxy store were stopped by Google’s Play Protect warning. At least five of the Showbox-based apps have been infected with dangerous malware.
For the latest tech news and reviews, follow Gadgets 360 on Twitter, Facebook and Google News. For the latest gadget and tech videos, subscribe to our YouTube channel.
CoinDCX, Binance Start 2023 with Crypto Awareness Program, Web3 Exchange
featured video of the day
CES and Auto Expo 2023 – The return of the legends | The Gadgets 360 Show