CVE-2024-34640: Low severity samsung android vulnerability
Published Sep 4, 2024
·Updated
Improper access control vulnerability in BGProtectManager prior to SMR Sep-2024 Release 1 allows local attackers to bypass restriction of process expiration.
Affected Software
40 affected components
Samsung android=12.0
Samsung android=12.0-smr-apr-2022-r1
Samsung android=12.0-smr-apr-2023-r1
Samsung android=12.0-smr-aug-2022-r1
Samsung android=12.0-smr-dec-2021-r1
Samsung android=12.0-smr-dec-2022-r1
Samsung android=12.0-smr-feb-2022-r1
Samsung android=12.0-smr-feb-2023-r1
Samsung android=12.0-smr-jan-2022-r1
Samsung android=12.0-smr-jan-2023-r1
Samsung android=12.0-smr-jul-2022-r1
Samsung android=12.0-smr-jul-2023-r1
Samsung android=12.0-smr-jun-2022-r1
Samsung android=12.0-smr-jun-2023-r1
Samsung android=12.0-smr-mar-2022-r1
Samsung android=12.0-smr-mar-2023-r1
Samsung android=12.0-smr-may-2022-r1
Samsung android=12.0-smr-may-2023-r1
Samsung android=12.0-smr-nov-2021-r1
Samsung android=12.0-smr-nov-2022-r1
Samsung android=12.0-smr-oct-2022-r1
Samsung android=12.0-smr-sep-2022-r1
Samsung android=13.0
Samsung android=13.0-smr-apr-2023-r1
Samsung android=13.0-smr-dec-2022-r1
Samsung android=13.0-smr-feb-2023-r1
Samsung android=13.0-smr-jan-2023-r1
Samsung android=13.0-smr-jul-2023-r1
Samsung android=13.0-smr-jun-2023-r1
Samsung android=13.0-smr-mar-2023-r1
Samsung android=13.0-smr-may-2023-r1
Samsung android=13.0-smr-nov-2022-r1
Samsung android=13.0-smr-oct-2022-r1
Samsung android=14.0-smr-apr-2024-r1
Samsung android=14.0-smr-feb-2024-r1
Samsung android=14.0-smr-jan-2024-r1
Samsung android=14.0-smr-jul-2024-r1
Samsung android=14.0-smr-jun-2024-r1
Samsung android=14.0-smr-mar-2024-r1
Samsung android=14.0-smr-may-2024-r1
Event History
Sep 4, 2024
CVE Published
via MITRE·05:32 AM
Data Sourced
via MITRE·05:32 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2024-34640?
CVE-2024-34640 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2024-34640?
To fix CVE-2024-34640, update your Samsung Android device to a version that includes the SMR Sep-2024 Release 1 patch.
3
Who is affected by CVE-2024-34640?
CVE-2024-34640 affects Samsung Android devices running versions prior to SMR Sep-2024 Release 1.
4
What type of vulnerability is CVE-2024-34640?
CVE-2024-34640 is categorized as an improper access control vulnerability.
5
Can CVE-2024-34640 be exploited locally?
Yes, CVE-2024-34640 can be exploited by local attackers to bypass restrictions related to process expiration.