CVE-2024-34637
First published: Wed Sep 04 2024(Updated: )
Improper access control in WindowManagerService prior to SMR Sep-2024 Release 1 in Android 12, and SMR Jun-2024 Release 1 in Android 13 and Android 14 allows local attackers to bypass restrictions on starting services from the background.
Credit: mobile.security@samsung.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Samsung Android | =12.0 | |
| Samsung Android | =12.0-smr_sep-2024-r1 | |
| Samsung Android | =13.0 | |
| Samsung Android | =13.0-smr-jun-2024-r1 | |
| Samsung Android | =14.0 | |
| Samsung Android | =14.0-smr-jun-2024-r1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/severity
- agent/last-modified-date
- agent/tags
- agent/softwarecombine
- vendor/samsung
- canonical/samsung android
- version/samsung android/12.0
- version/samsung android/12.0-smr_sep-2024-r1
- version/samsung android/13.0
- version/samsung android/13.0-smr-jun-2024-r1
- version/samsung android/14.0
- version/samsung android/14.0-smr-jun-2024-r1