CVE-2024-34598

Improper export of component in GoodLock prior to version 2.2.04.95 allows local attackers to install arbitrary applications from Galaxy Store

High · published September 4, 2025

CVSS v3.1
7.7
EPSS
0%
Percentile
1.8
In the wild
Unconfirmed
What it is

Improper export of component in GoodLock prior to version 2.2.04.95 allows local attackers to install arbitrary applications from Galaxy Store.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00121 · 1.8th percentile
Published
2025-09-04T10:55Z
EPSS history
Timeline
  • 04 SEP 10:55Z
    Improper export of component in GoodLock prior to version 2.2.04.95 allows local attackers to install arbitrary applications from Galaxy Store
    cvelistv5