Main Vulnerability Database Vulnerabilities #VU87114

Improper access control in Voice Recorder - CVE-2024-20839

Published: March 5, 2024

Vulnerability identifier: #VU87114

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2024-20839

CWE-ID: CWE-284

Exploitation vector: Local access

Exploit availability: No public exploit available

Vendor: Samsung

Affected software:
Voice Recorder

Detailed vulnerability description

The vulnerability allows a local attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions. An attacker with physical access can access recording files on the lock screen.

Install updates from vendor's website.