CVE-2024-20883: High severity samsung android vulnerability
Published Jun 4, 2024
·Updated
Incorrect use of privileged API vulnerability in registerBatteryStatsCallback in BatteryStatsService prior to SMR Jun-2024 Release 1 allows local attackers to use privileged API.
Affected Software
33 affected components
Samsung android=14.0
Samsung android=14.0-smr-apr-2022-r1
Samsung android=14.0-smr-apr-2023-r1
Samsung android=14.0-smr-apr-2024-r1
Samsung android=14.0-smr-aug-2022-r1
Samsung android=14.0-smr-aug-2023-r1
Samsung android=14.0-smr-dec-2021-r1
Samsung android=14.0-smr-dec-2022-r1
Samsung android=14.0-smr-dec-2023-r1
Samsung android=14.0-smr-feb-2022-r1
Samsung android=14.0-smr-feb-2023-r1
Samsung android=14.0-smr-feb-2024-r1
Samsung android=14.0-smr-jan-2022-r1
Samsung android=14.0-smr-jan-2023-r1
Samsung android=14.0-smr-jan-2024-r1
Samsung android=14.0-smr-jul-2022-r1
Samsung android=14.0-smr-jul-2023-r1
Samsung android=14.0-smr-jun-2022-r1
Samsung android=14.0-smr-jun-2023-r1
Samsung android=14.0-smr-mar-2022-r1
Samsung android=14.0-smr-mar-2023-r1
Samsung android=14.0-smr-mar-2024-r1
Samsung android=14.0-smr-may-2022-r1
Samsung android=14.0-smr-may-2023-r1
Samsung android=14.0-smr-may-2024-r1
Samsung android=14.0-smr-nov-2021-r1
Samsung android=14.0-smr-nov-2022-r1
Samsung android=14.0-smr-nov-2023-r1
Samsung android=14.0-smr-oct-2022-r1
Samsung android=14.0-smr-oct-2023-r1
Samsung android=14.0-smr-sep-2022-r1
Samsung android=14.0-smr-sep-2023-r1
Unknown BatteryStatsService<SMR Jun-2024 Release 1
Event History
Jun 4, 2024
CVE Published
via MITRE·06:42 AM
Data Sourced
via MITRE·06:42 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2024-20883?
CVE-2024-20883 has been rated with a medium severity level due to its exploitation potential by local attackers.
2
How do I fix CVE-2024-20883?
To mitigate CVE-2024-20883, users should update their devices to the SMR Jun-2024 Release 1 or later versions of Samsung Android.
3
Who is affected by CVE-2024-20883?
CVE-2024-20883 affects all Samsung Android devices running version 14.0 prior to the SMR Jun-2024 Release 1.
4
What type of vulnerability is CVE-2024-20883?
CVE-2024-20883 is categorized as an incorrect use of privileged API vulnerability within the BatteryStatsService.
5
Can CVE-2024-20883 be exploited remotely?
No, CVE-2024-20883 requires local access to the device for an attacker to exploit the vulnerability.