PT-2024-33527 · Unknown · Smart Touch Call

Khilli · Published 2024-12-03 · Updated 2026-01-09 · CVE-2024-49417

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Smart Touch Call versions prior to 1.0.0.8

Description The use of implicit intent for sensitive communication in Smart Touch Call allows local attackers to launch privileged activities. User interaction is required to trigger this issue.

Recommendations For versions prior to 1.0.0.8, update to version 1.0.0.8 or later to resolve the issue. As a temporary workaround, consider restricting user interaction with sensitive communication features until the update is applied.

Fix

Related Identifiers

CVE-2024-49417

Affected Products

Smart Touch Call

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-49417 · Security Note
• https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=12 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-49417 · Vendor Advisory
• https://t.me/cveNotify/148168 · Telegram Post
• https://t.me/cvedetector/11860 · Telegram Post
• https://twitter.com/CVEnew/status/1863830979863089496 · Twitter Post