Beware if you are a Samsung user: update this application now!
The Galaxy Store is an application pre-installed on Samsung devices that allows us to download apps and games. It is a great alternative to Google Play, but it has a security flaw: it allows you to download software, without your consent or notifying you, to already installed apps. So be careful if you are a Samsung user: update this application now!
This issue was discovered by researchers at NCC Group, a security firm, between November 23 and December 3, 2022.A second flaw has also been discovered, which allows malicious attackers to execute JavaScript after the user opens a web page. The combination of both is very dangerous, as it allows an attacker to install any app from the Galaxy Store and then download software without the app's consent.
To identify the bugs, they have been given names CVE-2023-21433 is the code that identifies the vulnerability of downloading unauthorized software, while CVE-2023-21434 is how the vulnerability that allows JavaScript to be executed from a web page is identified.
Fortunately Samsung has corrected these problems with an update To download it, just open the Galaxy Store and allow the new update. Therefore you should be careful if you are a Samsung user: update this application now! Although users of Android 13 with One UI 5 seem to be unaffected by this bug, it is also recommended that they update.
If you don't know how to update the Galaxy Store, here are the steps to follow. The easiest way, as we said before, is to open the Galaxy Store application and click on the Update button, which will appear on the first screen. However, if you don't see that button, go to Menu, then Settings and tap on About Galaxy Store, and finally tap on Refresh.
On the other hand, for those whose Samsung device is old and doesn't allow downloading updates, the problem is more complicated. Since they can't update it, the safest thing to do is disable the Galaxy Store. This is a problem because Samsung updates are downloaded via the Galaxy Store, but if your phone barely supports updates, it might be for the best.
