CVE-2024-49403

CVSS 3.1 Score 4.6 of 10 (medium)

Details

Published Nov 6, 2024
Updated: Nov 13, 2024

Summary

CVE-2024-49403 is a vulnerability affecting Samsung Voice Recorder prior to version 21.5.40.37. This issue involves improper access control, allowing physical attackers to bypass the lock screen and access recording files directly. The vulnerability poses a significant risk as sensitive information contained in these files may be exposed, potentially leading to privacy breaches. Attackers may exploit this issue by manipulating the device's lock screen, gaining unauthorized access to recording files. Samsung has released an updated version of the app to address this issue, and users are strongly encouraged to install it to protect their privacy.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share