CVE-2024-20839
CVSS 3.1 Score 4.6 of 10 (medium)
Details
Summary
CVE-2024-20839 is a vulnerability affecting the Samsung Voice Recorder app. This issue, present in versions prior to 21.5.16.01 for Android 12 and 13, and 21.4.51.02 for Android 14, involves improper access control. This weakness allows physical attackers to bypass the lock screen security and access recording files directly. This poses a significant risk as sensitive information within these files could be accessed without authorization. Samsung is advised to release a patch to address this vulnerability. Users, in the meantime, are encouraged to update their apps to prevent potential exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.