CVE-2023-30724 Auth bypass in Gallery

What is CVE-2023-30724?

CVE-2023-30724 is a medium-severity authentication bypass vulnerability in Samsung Mobile Gallery, published on 6 Sep 2023. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows attacker to access search history.

Weakness: CWE-287

Which versions are affected by CVE-2023-30724?

It affects 1 product.

Products include Samsung Gallery.

How do I fix CVE-2023-30724?

No fix has been published for CVE-2023-30724 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2023-30724 being exploited?

There is no known exploitation of CVE-2023-30724 in the wild and no public exploit code.

Other vulnerabilities in Samsung Mobile Gallery

• CVE-2025-20968 Missing authorization in Samsung Gallery High 7.2
• CVE-2025-20969 Information disclosure in Samsung Gallery Medium 5.5
• CVE-2025-20967 Missing authorization in Samsung Gallery Medium 5.1
• CVE-2023-30725 Auth bypass in Gallery Medium 5.1
• CVE-2025-20966 Missing authorization in Samsung Gallery Medium 4.6

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-qg27-56wg-9vv3.