Samsung Cloud Assistant
Monthly
Samsung Cloud Assistant prior to version 9.0.5 on Android exposes a broadcast receiver that fails to verify the origin of incoming intents, allowing any local application or process to send crafted messages that disable enhanced data protection settings. The attack requires on-device presence - either a co-resident malicious application or physical device access - but demands no special permissions, as reflected in the CVSS 4.0 PR:N metric. No active exploitation has been identified (not in CISA KEV) and no public proof-of-concept is known at time of analysis.
Samsung Cloud Assistant prior to version 9.0.5 on Android exposes a broadcast receiver that fails to verify the origin of incoming intents, allowing any local application or process to send crafted messages that disable enhanced data protection settings. The attack requires on-device presence - either a co-resident malicious application or physical device access - but demands no special permissions, as reflected in the CVSS 4.0 PR:N metric. No active exploitation has been identified (not in CISA KEV) and no public proof-of-concept is known at time of analysis.