Bixby vulnerabilities

Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity.

Incorrect default permissions in Bixby prior to version 4.0.86.0 allow local attackers to execute arbitrary commands with Bixby privilege.

The vulnerability in Bixby prior to version 4.0.70.8 is caused by improper export of Android application components. A local attacker can exploit this to execute arbitrary commands with Bixby privileges.