PT-2024-18749 · Google+1 · Android 12+3

Elias Schröder · Published 2024-03-04 · Updated 2024-03-05 · CVE-2024-20840

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Samsung Voice Recorder versions prior to 21.5.16.01 in Android 12 and Android 13 Samsung Voice Recorder versions prior to 21.4.51.02 in Android 14

Description The issue is related to improper access control in the Samsung Voice Recorder, allowing physical attackers with a hardware keyboard to use the Voice Recorder on the lock screen.

Recommendations For Samsung Voice Recorder versions prior to 21.5.16.01 in Android 12 and Android 13, update to version 21.5.16.01 or later. For Samsung Voice Recorder versions prior to 21.4.51.02 in Android 14, update to version 21.4.51.02 or later.

Fix

Related Identifiers

CVE-2024-20840

Affected Products

Android 12

Android 13

Android 14

Samsung Voice Recorder

References · 5

• https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=03 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-20840 · Security Note
• https://osv.dev/vulnerability/CVE-2024-20840 · Vendor Advisory
• https://twitter.com/CVEnew/status/1764876553064714662 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1764901758877249906 · Twitter Post