CVE-2024-34672

MEDIUM

5.5

Description

Improper input validation in SamsungVideoPlayer prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.3.41.230 in Android 14 allows local attackers to access video file of other users.

CVE Details

CVSS v3.1 Score5.5

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published10/8/2024

Last Modified1/8/2026

Sourcenvd

Honeypot Sightings0

Affected Products

samsung:androidsamsung:video_player

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=10(mobile.security@samsung.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.