CVE-2024-34638: High severity samsung android vulnerability

Published Sep 4, 2024

Updated

Improper handling of exceptional conditions in ThemeCenter prior to SMR Sep-2024 Release 1 allows local attackers to delete non-preloaded applications.

Affected Software

40 affected components

Samsung android=12.0

Samsung android=12.0-smr-apr-2022-r1

Samsung android=12.0-smr-apr-2023-r1

Samsung android=12.0-smr-aug-2022-r1

Samsung android=12.0-smr-dec-2021-r1

Samsung android=12.0-smr-dec-2022-r1

Samsung android=12.0-smr-feb-2022-r1

Samsung android=12.0-smr-feb-2023-r1

Samsung android=12.0-smr-jan-2022-r1

Samsung android=12.0-smr-jan-2023-r1

Samsung android=12.0-smr-jul-2022-r1

Samsung android=12.0-smr-jul-2023-r1

Samsung android=12.0-smr-jun-2022-r1

Samsung android=12.0-smr-jun-2023-r1

Samsung android=12.0-smr-mar-2022-r1

Samsung android=12.0-smr-mar-2023-r1

Samsung android=12.0-smr-may-2022-r1

Samsung android=12.0-smr-may-2023-r1

Samsung android=12.0-smr-nov-2021-r1

Samsung android=12.0-smr-nov-2022-r1

Samsung android=12.0-smr-oct-2022-r1

Samsung android=12.0-smr-sep-2022-r1

Samsung android=13.0

Samsung android=13.0-smr-apr-2023-r1

Samsung android=13.0-smr-dec-2022-r1

Samsung android=13.0-smr-feb-2023-r1

Samsung android=13.0-smr-jan-2023-r1

Samsung android=13.0-smr-jul-2023-r1

Samsung android=13.0-smr-jun-2023-r1

Samsung android=13.0-smr-mar-2023-r1

Samsung android=13.0-smr-may-2023-r1

Samsung android=13.0-smr-nov-2022-r1

Samsung android=13.0-smr-oct-2022-r1

Samsung android=14.0-smr-apr-2024-r1

Samsung android=14.0-smr-feb-2024-r1

Samsung android=14.0-smr-jan-2024-r1

Samsung android=14.0-smr-jul-2024-r1

Samsung android=14.0-smr-jun-2024-r1

Samsung android=14.0-smr-mar-2024-r1

Samsung android=14.0-smr-may-2024-r1

Event History

Sep 4, 2024

CVE Published

via MITRE·05:32 AM

Data Sourced

via MITRE·05:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 AM

DescriptionSeverity

Frequently Asked Questions

What is the severity of CVE-2024-34638?

The severity of CVE-2024-34638 is classified as critical due to its potential to allow local attackers to delete non-preloaded applications.

How do I fix CVE-2024-34638?

To fix CVE-2024-34638, update your Samsung device to the latest firmware that addresses this vulnerability by applying the September 2024 Release 1 security patch.

Which software versions are affected by CVE-2024-34638?

CVE-2024-34638 affects multiple Samsung Android versions including 12.0 and 13.0 across various security maintenance releases.

Who is impacted by CVE-2024-34638?

Local users of Samsung devices running the affected versions of Android may be impacted by CVE-2024-34638.

Is there a workaround for CVE-2024-34638?

Currently, there is no known workaround for CVE-2024-34638 other than applying the necessary firmware update as soon as it becomes available.