Priority LOW 24
Improper input validation in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows local attackers to access data within Samsung Gallery.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00158 · Published 2025-05-07 · Fixed in 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13 +1
Priority MEDIUM 45
Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows remote attackers to access data and perform internal operation…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00333 · Published 2025-05-07 · Fixed in 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13 +1
Priority LOW 39
Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows attackers to read and write arbitrary file with the privilege…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00216 · Published 2025-05-07 · Fixed in 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13 +1
Priority LOW 21
Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows physical attackers to access data across multiple user profile…
CVSS 3.1MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00213 · Published 2025-05-07 · Fixed in 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13 +1
Priority LOW 21
Improper access control vulnerability in Samsung Gallery prior to version 14.5.04.4 allows physical attackers to access the picture using physical keyboard on the lockscreen.
CVSS 3.1MEDIUM 4.6· Physical · No auth · No interaction · EPSS 0.00224 · Published 2024-02-06 · Fixed in 14.5.04.4
Priority LOW 24
Improper authentication in LocalProvier of Gallery prior to version 14.5.01.2 allows attacker to access the data in content provider.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00171 · Published 2023-09-06 · Fixed in 14.5.01.2 CWE-287
Priority LOW 18
Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows attacker to access search history.
CVSS 3.1MEDIUM 4.0· Local · No auth · No interaction · EPSS 0.00173 · Published 2023-09-06 · Fixed in 14.5.01.2 CWE-287
Priority LOW 18
Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action.
CVSS 3.1MEDIUM 4.0· Local · No auth · No interaction · EPSS 0.00223 · Published 2021-04-09 · Fixed in 5.4.16.1 CWE-926