CVE-2024-49404
First published: Wed Nov 06 2024(Updated: )
Improper Access Control in Samsung Video Player prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.3.41.230 in Android 14 allows physical attackers to access video file of other users.
Credit: mobile.security@samsung.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Samsung Video Player | <7.3.29.1 | |
| Samsung Android | =12.0 | |
| All of | ||
| Samsung Video Player | <7.3.36.1 | |
| Samsung Android | =13.0 | |
| All of | ||
| Samsung Video Player | <7.3.41.230 | |
| Samsung Android | =14.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-49404?
CVE-2024-49404 has a high severity due to improper access control vulnerabilities allowing unauthorized access to users' video files.
How do I fix CVE-2024-49404?
To fix CVE-2024-49404, update the Samsung Video Player to versions 7.3.29.1, 7.3.36.1, or 7.3.41.230, depending on your Android version.
Who is affected by CVE-2024-49404?
CVE-2024-49404 affects users of Samsung Video Player on Android devices with versions prior to 7.3.29.1, 7.3.36.1, and 7.3.41.230.
What types of vulnerabilities are covered in CVE-2024-49404?
CVE-2024-49404 covers vulnerabilities related to improper access control that can be exploited by physical attackers.
Can CVE-2024-49404 lead to data breaches?
Yes, CVE-2024-49404 can lead to data breaches as it allows physical attackers to access private video files of other users.
- agent/weakness
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/samsung
- canonical/samsung video player
- canonical/samsung android
- version/samsung android/12.0
- version/samsung android/13.0
- version/samsung android/14.0