Improper authentication in LocalProvier of Gallery prior to version 14.5.01.2 allows malicious user to access the data in content provider.
samsung gallery