PT-2024-33525 · Samsung · Samsung Mobile Devices+1

Natalie Silvanovich · CVE-2024-49414 · Published 2024-12-03 · Updated 2024-12-03

Positive Technologies (AI Summary)

CVSS v3.1

2.4

Low

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Software (affected versions not specified)

Description The issue allows physical attackers to temporarily access the recent app list through an authentication bypass using an alternate path in Dex Mode. This is possible prior to the SMR Dec-2024 Release 1.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2024-49414

Affected Products

Samsung Mobile Devices

Android

References · 5

• https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=12 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-49414 · Security Note
• https://osv.dev/vulnerability/CVE-2024-49414 · Vendor Advisory
• https://t.me/cvedetector/11857 · Telegram Post
• https://twitter.com/CVEnew/status/1863830983042359309 · Twitter Post