(Pwn2Own) Samsung Galaxy S21 Open Redirect Remote Code Execution Vulnerability
February 18th, 2022
Vulnerability Details
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S21 phones. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the Galaxy Store. By manipulating client-side HTML, an attacker can redirect the web view to an arbitrary site. An attacker can leverage this vulnerability to execute code in the context of root.
Additional Details
The patch was applied in server side on November 9th, 2021
Disclosure Timeline
- 2022-01-21 - Vulnerability reported to vendor
- 2022-02-18 - Coordinated public release of advisory
Credit
Sam Thomas (@_s_n_t) of Pentest Ltd (@pentestltd)
