CVE-2024-34672
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Oct 8, 2024
Updated: Oct 10, 2024
Summary
CVE-2024-34672 is a vulnerability affecting SamsungVideoPlayer before versions 7.3.29.1 on Android 12, 7.3.36.1 on Android 13, and 7.3.41.230 on Android 14. This issue stems from improper input validation, enabling local attackers to gain unauthorized access to the video files of other users. Successful exploitation of this vulnerability could lead to significant privacy concerns and potential data theft. Users are strongly recommended to update their SamsungVideoPlayer applications to the latest available version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.