CVE-2023-42580 (published 2023-12-05T02:44:38.048Z)
Improper URL validation from MCSLaunch deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to install APK from Galaxy Store.
Affected products: Vendor: Samsung Mobile
Product: Galaxy Store
Versions: 4.5.64.4