CVE-2024-34672: Input Validation
Improper input validation in SamsungVideoPlayer prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.3.41.230 in Android 14 allows local attackers to access video file of other users.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-34672?
CVE-2024-34672 is classified as a high-severity vulnerability due to improper input validation in SamsungVideoPlayer.
How do I fix CVE-2024-34672?
To fix CVE-2024-34672, users should update SamsungVideoPlayer to version 7.3.29.1 or later for Android 12, 7.3.36.1 or later for Android 13, and 7.3.41.230 or later for Android 14.
Who is affected by CVE-2024-34672?
CVE-2024-34672 affects SamsungVideoPlayer versions prior to 7.3.29.1 on Android 12, 7.3.36.1 on Android 13, and 7.3.41.230 on Android 14.
What type of attack can occur due to CVE-2024-34672?
CVE-2024-34672 allows local attackers to access video files of other users due to improper input validation.
What are the implications of CVE-2024-34672?
The implications of CVE-2024-34672 include unauthorized access to sensitive user video files, potentially compromising user privacy.