Exploiting the vulnerabilities could put a Galaxy user’s personal information at risk
The report notes that depending on what the attacker has in mind, an attack exploiting the vulnerabilities could allow the bad actors to access personal data and could also result in apps crashing. If the attacker uploads a malicious app to the Galaxy Store before exploiting the flaws, he could install that app on a Galaxy smartphone without the owner’s knowledge. And that could lead to serious security issues.
Two Galaxy Store vulnerabilities were discovered and fixed
Setting off the attack, the user could tap on a malicious hyperlink appearing on the Google Chrome browser (using a Samsung Galaxy phone), or a rogue app pre-installed on a Galaxy handset could get through Sammy’s URL filter and launch a webview to a domain controlled by the attackers.
Reserve your Galaxy S23 series pre-order now!
Make sure that you have the latest version of the Galaxy App Store running on your Galaxy-branded phone even if the device is running Android 13. That’s because there could be other issues related to the older build of the Galaxy Store that can’t be neutralized by the security features on Android 13.
How to update the Galaxy Store on your Samsung phone
To update the Galaxy Store on your phone, open the Galaxy Store app and you should see a notification with a button that says Update. Tap on that button and follow the directions. If you don’t see the notification, after opening the app go to Menu > Settings. Tap on About Galaxy Store and press on the update button. Since the update was released on January 1st, there is a good chance that you’ve already installed the update.
Those who own older Samsung Galaxy phones that no longer have support from Samsung could be out of luck. That’s because they would not receive an update for the Galaxy Store and their version of the app storefront could contain the flaws. In this case, you could buy a new phone or you might want to disable the Galaxy Store from your phone. But that isn’t a good solution either since updates for Samsung apps for your device come through the Galaxy Store.