CVE-2024-34639: Medium severity samsung android vulnerability

Published Sep 4, 2024

Updated

Improper handling of exceptional conditions in Setupwizard prior to SMR Aug-2024 Release 1 allows physical attackers to bypass proper validation.

Affected Software

40 affected components

Samsung android=12.0

Samsung android=12.0-smr-apr-2022-r1

Samsung android=12.0-smr-apr-2023-r1

Samsung android=12.0-smr-aug-2022-r1

Samsung android=12.0-smr-dec-2021-r1

Samsung android=12.0-smr-dec-2022-r1

Samsung android=12.0-smr-feb-2022-r1

Samsung android=12.0-smr-feb-2023-r1

Samsung android=12.0-smr-jan-2022-r1

Samsung android=12.0-smr-jan-2023-r1

Samsung android=12.0-smr-jul-2022-r1

Samsung android=12.0-smr-jul-2023-r1

Samsung android=12.0-smr-jun-2022-r1

Samsung android=12.0-smr-jun-2023-r1

Samsung android=12.0-smr-mar-2022-r1

Samsung android=12.0-smr-mar-2023-r1

Samsung android=12.0-smr-may-2022-r1

Samsung android=12.0-smr-may-2023-r1

Samsung android=12.0-smr-nov-2021-r1

Samsung android=12.0-smr-nov-2022-r1

Samsung android=12.0-smr-oct-2022-r1

Samsung android=12.0-smr-sep-2022-r1

Samsung android=13.0

Samsung android=13.0-smr-apr-2023-r1

Samsung android=13.0-smr-dec-2022-r1

Samsung android=13.0-smr-feb-2023-r1

Samsung android=13.0-smr-jan-2023-r1

Samsung android=13.0-smr-jul-2023-r1

Samsung android=13.0-smr-jun-2023-r1

Samsung android=13.0-smr-mar-2023-r1

Samsung android=13.0-smr-may-2023-r1

Samsung android=13.0-smr-nov-2022-r1

Samsung android=13.0-smr-oct-2022-r1

Samsung android=14.0-smr-apr-2024-r1

Samsung android=14.0-smr-feb-2024-r1

Samsung android=14.0-smr-jan-2024-r1

Samsung android=14.0-smr-jul-2024-r1

Samsung android=14.0-smr-jun-2024-r1

Samsung android=14.0-smr-mar-2024-r1

Samsung android=14.0-smr-may-2024-r1

Event History

Sep 4, 2024

CVE Published

via MITRE·05:32 AM

Data Sourced

via MITRE·05:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 AM

DescriptionSeverity

Frequently Asked Questions

What is the severity of CVE-2024-34639?

CVE-2024-34639 is considered a high-severity vulnerability due to its potential to allow physical attackers to bypass validation.

How do I fix CVE-2024-34639?

To fix CVE-2024-34639, users should update their Samsung Android devices to the latest security patch released in August 2024.

Which devices are affected by CVE-2024-34639?

CVE-2024-34639 affects multiple Samsung Android versions including 12.0, 13.0, and 14.0 across several specific update releases.

What kind of attacks does CVE-2024-34639 enable?

CVE-2024-34639 enables physical attackers to bypass proper validation mechanisms during the Setup Wizard.

Is there a known exploit for CVE-2024-34639?

As of now, there are no known exploits publicly associated with CVE-2024-34639, but the vulnerability poses significant risk if unpatched.