PT-2024-26093 · Samsung · Samsung Video Player

Ycmint · Published 2024-10-07 · Updated 2026-01-08 · CVE-2024-34672

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SamsungVideoPlayer versions prior to 7.3.29.1 SamsungVideoPlayer versions prior to 7.3.36.1 SamsungVideoPlayer versions prior to 7.3.41.230

Description The issue is related to improper input validation in SamsungVideoPlayer, allowing local attackers to access video files of other users.

Recommendations For versions prior to 7.3.29.1, update to version 7.3.29.1 or later. For versions prior to 7.3.36.1, update to version 7.3.36.1 or later. For versions prior to 7.3.41.230, update to version 7.3.41.230 or later.

Fix

Related Identifiers

CVE-2024-34672

Affected Products

Samsung Video Player

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-34672 · Security Note
• https://osv.dev/vulnerability/CVE-2024-34672 · Vendor Advisory
• https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=10 · Vendor Advisory
• https://t.me/cvedetector/7319 · Telegram Post
• https://t.me/cvenotify/97393 · Telegram Post
• https://t.me/cveNotify/148115 · Telegram Post
• https://twitter.com/CVEnew/status/1843545730130018652 · Twitter Post