CVE-2022-28544: Samsung Galaxy Store

Medium severity, CVSS 5.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Path traversal vulnerability in unzip method of InstallAgentCommonHelper in Galaxy store prior to version 4.5.40.5 allows attacker to access the file of Galaxy store.

Affected products

• Samsung Galaxy Store: before 4.5.40.5 (fixed in 4.5.40.5)

Published 2022-04-11. Last modified 2026-06-17.