PT-2024-18805 · Unknown · Filterprovider

Published 2024-07-02 · Updated 2024-07-05 · CVE-2024-20892

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FilterProvider versions prior to SMR Jul-2024 Release 1

Description The issue is related to improper verification of signature in FilterProvider, allowing local attackers to execute privileged behaviors. User interaction is required for triggering this issue.

Recommendations For versions prior to SMR Jul-2024 Release 1, update to SMR Jul-2024 Release 1 or later to resolve the issue.

Fix

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

CVE-2024-20892

Affected Products

Filterprovider

References · 4

• https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=07 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-20892 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-20892 · Security Note
• https://t.me/cvenotify/85229 · Telegram Post