CVE-2024-49422: Medium severity Samsung Android vulnerability

Published Dec 31, 2024

Updated

Protection Mechanism Failure in bootloader prior to SMR Oct-2024 Release 1 allows physical attackers to reset lockscreen failure count by hardware fault injection. User interaction is required for triggering this vulnerability.

Affected Software

34 affected components

Samsung Android=13.0-smr-apr-2022-r1

Samsung Android=13.0-smr-apr-2023-r1

Samsung Android=13.0-smr-apr-2024-r1

Samsung Android=13.0-smr-aug-2022-r1

Samsung Android=13.0-smr-aug-2023-r1

Samsung Android=13.0-smr-aug-2024-r1

Samsung Android=13.0-smr-dec-2021-r1

Samsung Android=13.0-smr-dec-2022-r1

Samsung Android=13.0-smr-dec-2023-r1

Samsung Android=13.0-smr-feb-2022-r1

Samsung Android=13.0-smr-feb-2023-r1

Samsung Android=13.0-smr-feb-2024-r1

Samsung Android=13.0-smr-jan-2022-r1

Samsung Android=13.0-smr-jan-2023-r1

Samsung Android=13.0-smr-jan-2024-r1

Samsung Android=13.0-smr-jul-2022-r1

Samsung Android=13.0-smr-jul-2023-r1

Samsung Android=13.0-smr-jul-2024-r1

Samsung Android=13.0-smr-jun-2022-r1

Samsung Android=13.0-smr-jun-2023-r1

Samsung Android=13.0-smr-jun-2024-r1

Samsung Android=13.0-smr-mar-2022-r1

Samsung Android=13.0-smr-mar-2023-r1

Samsung Android=13.0-smr-mar-2024-r1

Samsung Android=13.0-smr-may-2022-r1

Samsung Android=13.0-smr-may-2023-r1

Samsung Android=13.0-smr-may-2024-r1

Samsung Android=13.0-smr-nov-2021-r1

Samsung Android=13.0-smr-nov-2022-r1

Samsung Android=13.0-smr-nov-2023-r1

Samsung Android=13.0-smr-oct-2022-r1

Samsung Android=13.0-smr-oct-2023-r1

Samsung Android=13.0-smr-sep-2022-r1

Samsung Android=13.0-smr-sep-2023-r1

Event History

Dec 31, 2024

CVE Published

via MITRE·08:39 AM

Data Sourced

via MITRE·08:39 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:15 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-49422?

CVE-2024-49422 is classified as a medium severity vulnerability due to the potential for lockscreen bypass through physical attacks.

How do I fix CVE-2024-49422?

To mitigate CVE-2024-49422, users should update their Samsung devices to the latest firmware version provided in the security updates.

What types of attacks can exploit CVE-2024-49422?

CVE-2024-49422 can be exploited via physical access to the device, allowing attackers to reset lockscreen failure counts through hardware fault injection.

Is user interaction required to exploit CVE-2024-49422?

Yes, user interaction is required for triggering CVE-2024-49422, making it dependent on the victim's action.

Which versions of Samsung Android are affected by CVE-2024-49422?

CVE-2024-49422 affects several Samsung Android versions, specifically those prior to the SMR Oct-2024 Release 1.