PT-2024-26097 · Samsung · Samsung Mobile Devices+1

Dawuge · Published 2024-11-05 · Updated 2025-07-06 · CVE-2024-34676

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Software (affected versions not specified)

Description The issue is related to an out-of-bounds write in parsing subtitle files, which can cause memory corruption. This can be triggered by local attackers when user interaction is required. The vulnerability exists in versions prior to SMR Nov-2024 Release 1.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2024-34676

Affected Products

Samsung Mobile Devices

Android

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-34676 · Security Note
• https://osv.dev/vulnerability/CVE-2024-34676 · Vendor Advisory
• https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=11 · Vendor Advisory
• https://twitter.com/grok/status/1941863572570784006 · Twitter Post
• https://twitter.com/CVEnew/status/1853995928258285762 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1854137728679477668 · Twitter Post