CVE-2024-34620: High severity samsung android vulnerability

Published Aug 7, 2024

Updated

Improper privilege management in SumeNNService prior to SMR Aug-2024 Release 1 allows local attackers to start privileged service.

Affected Software

68 affected components

Samsung android=13.0

Samsung android=13.0-smr-apr-2022-r1

Samsung android=13.0-smr-apr-2023-r1

Samsung android=13.0-smr-apr-2024-r1

Samsung android=13.0-smr-aug-2022-r1

Samsung android=13.0-smr-aug-2023-r1

Samsung android=13.0-smr-dec-2021-r1

Samsung android=13.0-smr-dec-2022-r1

Samsung android=13.0-smr-dec-2023-r1

Samsung android=13.0-smr-feb-2022-r1

Samsung android=13.0-smr-feb-2023-r1

Samsung android=13.0-smr-feb-2024-r1

Samsung android=13.0-smr-jan-2022-r1

Samsung android=13.0-smr-jan-2023-r1

Samsung android=13.0-smr-jan-2024-r1

Samsung android=13.0-smr-jul-2022-r1

Samsung android=13.0-smr-jul-2023-r1

Samsung android=13.0-smr-jul-2024-r1

Samsung android=13.0-smr-jun-2022-r1

Samsung android=13.0-smr-jun-2023-r1

Samsung android=13.0-smr-jun-2024-r1

Samsung android=13.0-smr-mar-2022-r1

Samsung android=13.0-smr-mar-2023-r1

Samsung android=13.0-smr-mar-2024-r1

Samsung android=13.0-smr-may-2022-r1

Samsung android=13.0-smr-may-2023-r1

Samsung android=13.0-smr-may-2024-r1

Samsung android=13.0-smr-nov-2021-r1

Samsung android=13.0-smr-nov-2022-r1

Samsung android=13.0-smr-nov-2023-r1

Samsung android=13.0-smr-oct-2022-r1

Samsung android=13.0-smr-oct-2023-r1

Samsung android=13.0-smr-sep-2022-r1

Samsung android=13.0-smr-sep-2023-r1

Samsung android=14.0

Samsung android=14.0-smr-apr-2022-r1

Samsung android=14.0-smr-apr-2023-r1

Samsung android=14.0-smr-apr-2024-r1

Samsung android=14.0-smr-aug-2022-r1

Samsung android=14.0-smr-aug-2023-r1

Samsung android=14.0-smr-dec-2021-r1

Samsung android=14.0-smr-dec-2022-r1

Samsung android=14.0-smr-dec-2023-r1

Samsung android=14.0-smr-feb-2022-r1

Samsung android=14.0-smr-feb-2023-r1

Samsung android=14.0-smr-feb-2024-r1

Samsung android=14.0-smr-jan-2022-r1

Samsung android=14.0-smr-jan-2023-r1

Samsung android=14.0-smr-jan-2024-r1

Samsung android=14.0-smr-jul-2022-r1

Samsung android=14.0-smr-jul-2023-r1

Samsung android=14.0-smr-jul-2024-r1

Samsung android=14.0-smr-jun-2022-r1

Samsung android=14.0-smr-jun-2023-r1

Samsung android=14.0-smr-jun-2024-r1

Samsung android=14.0-smr-mar-2022-r1

Samsung android=14.0-smr-mar-2023-r1

Samsung android=14.0-smr-mar-2024-r1

Samsung android=14.0-smr-may-2022-r1

Samsung android=14.0-smr-may-2023-r1

Samsung android=14.0-smr-may-2024-r1

Samsung android=14.0-smr-nov-2021-r1

Samsung android=14.0-smr-nov-2022-r1

Samsung android=14.0-smr-nov-2023-r1

Samsung android=14.0-smr-oct-2022-r1

Samsung android=14.0-smr-oct-2023-r1

Samsung android=14.0-smr-sep-2022-r1

Samsung android=14.0-smr-sep-2023-r1

Event History

Aug 7, 2024

CVE Published

via MITRE·01:30 AM

Data Sourced

via MITRE·01:30 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-34620?

CVE-2024-34620 has been rated with a high severity due to improper privilege management allowing local attackers to start a privileged service.

How do I fix CVE-2024-34620?

To fix CVE-2024-34620, update your Samsung Android device to the latest firmware version that addresses this vulnerability.

What versions of Samsung Android are affected by CVE-2024-34620?

CVE-2024-34620 affects Samsung Android versions 13.0 and 14.0 prior to the SMR Aug-2024 Release 1.

Who is impacted by CVE-2024-34620?

Local attackers with access to the affected devices are impacted by CVE-2024-34620 due to potential exploitation of elevated service privileges.

Is there a workaround for CVE-2024-34620?

Currently, there are no known workarounds for CVE-2024-34620 other than applying the necessary updates to your device.