CVE-2022-33709: Samsung Galaxy Store

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper input validation vulnerability in ApexPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege.

Affected products

• Samsung Galaxy Store: before 4.5.41.8 (fixed in 4.5.41.8)

Published 2022-07-12. Last modified 2026-06-17.