PT-2024-18798 · Samsung · Samsung Live Wallpaper

Heechan Kim + 1 · Published 2024-06-03 · Updated 2024-06-04 · CVE-2024-20886

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Samsung Live Wallpaper PC versions prior to 3.3.8.0

Description The issue allows for arbitrary directory creation, which can be exploited by an attacker. The estimated number of potentially affected devices and details about real-world incidents where this issue was exploited are not provided.

Recommendations For versions prior to 3.3.8.0, update to version 3.3.8.0 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive directories to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2024-20886

Affected Products

Samsung Live Wallpaper

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-20886 · Security Note
• https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=06 · Note
• https://twitter.com/CVEnew/status/1797883784442081736 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1797947374276424168 · Twitter Post