PT-2024-26060 · Google · Android

Localh0Ster · Published 2024-09-03 · Updated 2024-09-06 · CVE-2024-34641

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions FeliCaTest versions prior to SMR Sep-2024 Release 1

Description The issue allows local attackers to enable NFC configuration due to improper export of Android application components.

Recommendations For versions prior to SMR Sep-2024 Release 1, update to SMR Sep-2024 Release 1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2024-34641

Affected Products

Android

References · 6

• https://osv.dev/vulnerability/CVE-2024-34641 · Vendor Advisory
• https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-34641 · Security Note
• https://twitter.com/VulmonFeeds/status/1831290487224864925 · Twitter Post
• https://twitter.com/CVEnew/status/1831208390338523276 · Twitter Post
• https://t.me/cvenotify/93146 · Telegram Post