VulnerabilityAnalyzed
CVE-2024-20853
Improper verification of intent by broadcast receiver vulnerability in ThemeStore prior to 5.3.05.2 allows local attackers to write arbitrary files to sandbox of ThemeStore.
MEDIUM 5.1EPSS 0.15%
Does this matter?
Lower severity and a low EPSS score (0.15%). Track it; it rarely justifies an emergency change on its own.
Description
Improper verification of intent by broadcast receiver vulnerability in ThemeStore prior to 5.3.05.2 allows local attackers to write arbitrary files to sandbox of ThemeStore.
- CVSS 3.1
- 5.1 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
- EPSS
- 0.15% probability · 5th percentile
- CISA KEV
- Not listed
- Affected
- samsung/galaxy themes
- Source
- mobile.security@samsung.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.