PT-2024-18747 · Google+1 · Android 12+3

Blunt · Published 2024-03-04 · Updated 2024-12-23 · CVE-2024-20839

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samsung Voice Recorder versions prior to 21.5.16.01 in Android 12 and Android 13 Samsung Voice Recorder versions prior to 21.4.51.02 in Android 14

Description The issue is related to improper access control in the Samsung Voice Recorder, allowing physical attackers to access recording files on the lock screen. This could potentially expose sensitive information.

Recommendations For Samsung Voice Recorder versions prior to 21.5.16.01 in Android 12 and Android 13, update to version 21.5.16.01 or later. For Samsung Voice Recorder versions prior to 21.4.51.02 in Android 14, update to version 21.4.51.02 or later.

Fix

Related Identifiers

CVE-2024-20839

Affected Products

Android 12

Android 13

Android 14

Samsung Voice Recorder

References · 6

• https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=03 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-20839 · Security Note
• https://osv.dev/vulnerability/CVE-2024-20839 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1764902011772743913 · Twitter Post
• https://t.me/cvenotify/72986 · Telegram Post
• https://twitter.com/CVEnew/status/1764876554067226701 · Twitter Post