First published: Tue Jul 02 2024(Updated: )
Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local attackers to write out-of-bounds memory.
Credit: mobile.security@samsung.com
Affected Software | Affected Version | How to fix |
---|---|---|
Samsung Android | =12.0 | |
Samsung Android | =12.0-smr-apr-2022-r1 | |
Samsung Android | =12.0-smr-apr-2023-r1 | |
Samsung Android | =12.0-smr-apr-2024-r1 | |
Samsung Android | =12.0-smr-aug-2022-r1 | |
Samsung Android | =12.0-smr-aug-2023-r1 | |
Samsung Android | =12.0-smr-dec-2021-r1 | |
Samsung Android | =12.0-smr-dec-2022-r1 | |
Samsung Android | =12.0-smr-dec-2023-r1 | |
Samsung Android | =12.0-smr-feb-2022-r1 | |
Samsung Android | =12.0-smr-feb-2023-r1 | |
Samsung Android | =12.0-smr-feb-2024-r1 | |
Samsung Android | =12.0-smr-jan-2022-r1 | |
Samsung Android | =12.0-smr-jan-2023-r1 | |
Samsung Android | =12.0-smr-jan-2024-r1 | |
Samsung Android | =12.0-smr-jul-2022-r1 | |
Samsung Android | =12.0-smr-jul-2023-r1 | |
Samsung Android | =12.0-smr-jun-2022-r1 | |
Samsung Android | =12.0-smr-jun-2023-r1 | |
Samsung Android | =12.0-smr-jun-2024-r1 | |
Samsung Android | =12.0-smr-mar-2022-r1 | |
Samsung Android | =12.0-smr-mar-2023-r1 | |
Samsung Android | =12.0-smr-mar-2024-r1 | |
Samsung Android | =12.0-smr-may-2022-r1 | |
Samsung Android | =12.0-smr-may-2023-r1 | |
Samsung Android | =12.0-smr-may-2024-r1 | |
Samsung Android | =12.0-smr-nov-2021-r1 | |
Samsung Android | =12.0-smr-nov-2022-r1 | |
Samsung Android | =12.0-smr-nov-2023-r1 | |
Samsung Android | =12.0-smr-oct-2022-r1 | |
Samsung Android | =12.0-smr-oct-2023-r1 | |
Samsung Android | =12.0-smr-sep-2022-r1 | |
Samsung Android | =12.0-smr-sep-2023-r1 | |
Samsung Android | =13.0 | |
Samsung Android | =13.0-smr-apr-2023-r1 | |
Samsung Android | =13.0-smr-apr-2024-r1 | |
Samsung Android | =13.0-smr-aug-2023-r1 | |
Samsung Android | =13.0-smr-dec-2022-r1 | |
Samsung Android | =13.0-smr-dec-2023-r1 | |
Samsung Android | =13.0-smr-feb-2023-r1 | |
Samsung Android | =13.0-smr-feb-2024-r1 | |
Samsung Android | =13.0-smr-jan-2023-r1 | |
Samsung Android | =13.0-smr-jan-2024-r1 | |
Samsung Android | =13.0-smr-jul-2023-r1 | |
Samsung Android | =13.0-smr-jun-2023-r1 | |
Samsung Android | =13.0-smr-jun-2024-r1 | |
Samsung Android | =13.0-smr-mar-2023-r1 | |
Samsung Android | =13.0-smr-mar-2024-r1 | |
Samsung Android | =13.0-smr-may-2023-r1 | |
Samsung Android | =13.0-smr-may-2024-r1 | |
Samsung Android | =13.0-smr-nov-2022-r1 | |
Samsung Android | =13.0-smr-nov-2023-r1 | |
Samsung Android | =13.0-smr-oct-2022-r1 | |
Samsung Android | =13.0-smr-oct-2023-r1 | |
Samsung Android | =13.0-smr-sep-2023-r1 | |
Samsung Android | =14.0 | |
Samsung Android | =14.0-smr-apr-2023-r1 | |
Samsung Android | =14.0-smr-apr-2024-r1 | |
Samsung Android | =14.0-smr-aug-2023-r1 | |
Samsung Android | =14.0-smr-dec-2022-r1 | |
Samsung Android | =14.0-smr-dec-2023-r1 | |
Samsung Android | =14.0-smr-feb-2023-r1 | |
Samsung Android | =14.0-smr-jan-2023-r1 | |
Samsung Android | =14.0-smr-jan-2024-r1 | |
Samsung Android | =14.0-smr-jul-2023-r1 | |
Samsung Android | =14.0-smr-jun-2023-r1 | |
Samsung Android | =14.0-smr-jun-2024-r1 | |
Samsung Android | =14.0-smr-mar-2023-r1 | |
Samsung Android | =14.0-smr-mar-2024-r1 | |
Samsung Android | =14.0-smr-may-2023-r1 | |
Samsung Android | =14.0-smr-may-2024-r1 | |
Samsung Android | =14.0-smr-nov-2022-r1 | |
Samsung Android | =14.0-smr-nov-2023-r1 | |
Samsung Android | =14.0-smr-oct-2022-r1 | |
Samsung Android | =14.0-smr-oct-2023-r1 | |
Samsung Android | =14.0-smr-sep-2023-r1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-20901 is classified as a high-severity vulnerability due to the potential for local attackers to exploit improper input validation.
To rectify CVE-2024-20901, it is essential to apply the security patch provided in Samsung's SMR update released in July 2024.
CVE-2024-20901 affects various versions of Samsung Android, specifically those prior to the July 2024 SMR Release 1.
CVE-2024-20901 can allow local attackers to perform out-of-bounds memory writes, potentially leading to system instability or unauthorized data access.
If you are using an affected version of Samsung Android, ensure that you update to the latest version or apply the specific security patch for CVE-2024-20901.