PT-2024-26092 · Samsung · Samsung Internet

Khilli · Published 2024-10-07 · Updated 2025-12-06 · CVE-2024-34671

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samsung Internet versions prior to 26.0.3.1

Description The issue concerns the use of implicit intent for sensitive communication in translation, allowing local attackers to obtain sensitive information. User interaction is required to trigger this issue.

Recommendations For versions prior to 26.0.3.1, update to version 26.0.3.1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2024-34671

Affected Products

Samsung Internet

References · 7

• https://osv.dev/vulnerability/CVE-2024-34671 · Vendor Advisory
• https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=10 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-34671 · Security Note
• https://t.me/cvenotify/97392 · Telegram Post
• https://t.me/cveNotify/144979 · Telegram Post
• https://twitter.com/CVEnew/status/1843545731191169482 · Twitter Post
• https://t.me/cvedetector/7322 · Telegram Post