CVE-2023-21515 (published 2023-05-26T00:00:00)
InstantPlay which included vulnerable script which could execute javascript in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store.
Affected products: Vendor: Samsung Mobile
Product: Galaxy Store
Versions: unspecified