Connect with us

Apps

Samsung Galaxy Store had critical auto apps installation flaws

Published

on

Samsung Galaxy Store

Researchers from the NCC Group discovered two CVEs in Samsung’s official app store. As detailed by the researchers, these two flaws in Samsung Galaxy Store could enable attackers to install any app without the user’s knowledge or to direct victims to a malicious web location.

Fixed with Samsung Galaxy Store app version 4.5.49.8, the flaws were discovered by NCC Group researchers between November 23 and December 3, 2022. In a recent development, researchers at NCC Group disclosed (via Mishaal Rahman) technical details for the two security issues with proof-of-concept.

Follow Sammy Fans on Google News

Technical details and backend code aside, let’s discuss the impact of these security flaws on Samsung devices.

These CVEs could not have affected devices running the latest Android 13-based One UI 5. As noted in the report, a pre-installed rouge application on a Samsung device running Android 12 or below can abuse this issue to install any application currently available on Galaxy App Store.

Join Sammy Fans on Telegram

In order to fix these CVEs, the South Korean tech giant has pushed an updated version of the Galaxy Store (version 4.5.49.8). In case you have a Galaxy device running below Android 12, you should install the latest version of Galaxy Store to ensure your data privacy.

NCC Group found that “a webview within the Galaxy App Store contained a filter that limited which domains that webview could browse to.” Regardless the developers have not correctly configured it, which would allow the webview to browse to an attacker-controlled domain.

Samsung Galaxy Store

Galaxy Store CVEs:

  • Technical Advisory: Improper access control could allow local attackers to install applications from the Galaxy App Store (CVE-2023-21433)
  • Technical Advisory: Improper input validation could allow local attackers to execute JavaScript by launching a web page (CVE-2023-21434)

Proof-of-concept

Samsung Galaxy Store Flaws

James is the lead content creator on Sammy Fans and mostly works on Samsung's firmware section. His first phone was the Galaxy S4 and continues to get new S series devices. Most of the time, James tries to learn about new technologies and gadgets but he also sneaks a bit of free time to nearby rivers and nature.

Apps

Galaxy Wear OS devices get performance boost with Samsung Health app update

Published

on

Samsung Health app Wear OS update

Samsung has released an update for the Health app on Wear OS devices including Galaxy Watch 4, Galaxy Watch 5, and Galaxy Watch 6 models. Identified via version 6.26.6.001, the update is available for download on the Galaxy Store with an installation package size of 98.95MB.

The latest update of the Samsung Health app for Wear OS addresses some issues to enhance the overall stability and performance of the app. Although the update does not introduce new features, it ensures users a smoother and more reliable experience.

Samsung Health app is a versatile tool for tracking various health-related metrics, including physical activity, calorie information, sleep quality, and stress levels.

For those eager to upgrade, the Samsung Health 6.26.6.001 update can be accessed through the Galaxy Store by navigating to the Menu option and selecting Updates. Additionally, a third-party source link for downloading the update is also available.

Samsung Health app Wear OS update

Stay up-to-date on Samsung Galaxy, One UI & Tech Stuffs by following Sammy Fans on X/Twitter. You can also discover the latest news, polls, reviews, and new features for Samsung & Google Apps, Galaxy Phones, and the One UI/Android operating system.

Do you like this post? Kindly, let us know on X/Twitter: we love hearing your feedback! If you prefer using other social platforms besides X, follow/join us on Google News, Facebook, and Telegram.

Continue Reading

Apps

New update for Samsung One UI Keyboard app available on Galaxy Store

Published

on

Samsung Keyboard 5.8.20.12 update

Samsung Keyboard app is getting a new update with version 5.8.20.12 for One UI devices. The new update improves the overall performance of the app to provide a better user experience.

The fresh update of the Samsung Keyboard app fixes some issues that users encountered in the previous version. In addition, the update also enhances some functions of the app for smoother and enhanced performance.

However, the update does not include any new features or changes. You can get the update via Galaxy Store by downloading an 87.25MB installation package.

To check the update, you just need to open the Galaxy Store app >> Menu option >> Updates. If your Galaxy device received the Samsung Keyboard 5.8.20.12 update then download it now to get enhanced features.

Aside from this, some Galaxy device users encountered an issue with applying custom keyboard themes. However, Samsung confirmed that the Theme Park keyboard theme does not apply properly when the color palette feature is active and the next update will resolve this issue.

Samsung Keyboard 5.8.20.12 update

Stay up-to-date on Samsung Galaxy, One UI & Tech Stuffs by following Sammy Fans on X/Twitter. You can also discover the latest news, polls, reviews, and new features for Samsung & Google Apps, Galaxy Phones, and the One UI/Android operating system.

Do you like this post? Kindly, let us know on X/Twitter: we love hearing your feedback! If you prefer using other social platforms besides X, follow/join us on Google News, Facebook, and Telegram.

Continue Reading

Apps

One UI 6.1 and 6.0 Samsung devices get enhanced QuickStar functions

Published

on

Samsung QuickStar One UI 6.1 update

Samsung QuickStar app has received a fresh update with version 7.2.06.35, which enhances some functions for Galaxy devices running One UI 6.1 or One UI 6.0. The update is available on the Galaxy Store for eligible devices.

With the new update, users now have the option to customize the date format on their device’s clock display. This feature is compatible with devices running One UI 6.1 and above, allowing users to adjust how the date appears according to their preferences.

In addition, the update brings a new method for connecting the QuickStar app with Samsung’s Theme Park Good Lock module. To take advantage of this feature, users must ensure their Galaxy devices (running One UI 6.0 or higher) have the latest version of Theme Park, specifically version 1.1.00.8 or higher.

Furthermore, the update stabilizes the “Quick settings instant access” function. Overall, the update aims to enhance the customization features and stability of the user interface. If your device is eligible, download the update through Galaxy Store >> Menu option >> Updates.

Stay up-to-date on Samsung Galaxy, One UI & Tech Stuffs by following Sammy Fans on X/Twitter. You can also discover the latest news, polls, reviews, and new features for Samsung & Google Apps, Galaxy Phones, and the One UI/Android operating system.

Do you like this post? Kindly, let us know on X/Twitter: we love hearing your feedback! If you prefer using other social platforms besides X, follow/join us on Google News, Facebook, and Telegram.

Continue Reading