Main Vulnerability Database Vulnerabilities #VU87114

#VU87114 Improper access control in Voice Recorder - CVE-2024-20839

Published: March 5, 2024

Vulnerability identifier: #VU87114

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2024-20839

CWE-ID: CWE-284

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
Voice Recorder

Software vendor:
Samsung

Description

The vulnerability allows a local attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions. An attacker with physical access can access recording files on the lock screen.

Install updates from vendor's website.