CVE-2024-34672

🗓️ 08 Oct 2024 06:30:54Reported by SamsungMobileType

Improper input validation in SamsungVideoPlayer allows local attackers to access video file

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2024-34672	8 Oct 202410:21	–	circl
CNNVD	SAMSUNG Video Player 安全漏洞	8 Oct 202400:00	–	cnnvd
Cvelist	CVE-2024-34672	8 Oct 202406:30	–	cvelist
EUVD	EUVD-2024-34971	3 Oct 202520:07	–	euvd
NVD	CVE-2024-34672	8 Oct 202407:15	–	nvd
Positive Technologies	PT-2024-26093	7 Oct 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-34672	9 Jan 202609:06	–	redhatcve
Vulnrichment	CVE-2024-34672	8 Oct 202406:30	–	vulnrichment

NVD

Node

samsung video_playerRange<7.3.29.1

AND

samsung androidMatch12.0

Node

samsung video_playerRange<7.3.36.1

AND

samsung androidMatch13.0

Node

samsung video_playerRange<7.3.41.230

AND

samsung androidMatch14.0

[
  {
    "vendor": "Samsung Mobile",
    "product": "SamsungVideoPlayer",
    "versions": [
      {
        "status": "unaffected",
        "version": "7.3.29.1 in Android 12, 7.3.36.1 in Android 13 and 7.3.41.230 in Android 14"
      }
    ],
    "defaultStatus": "affected"
  }
]

Source	Link
security	www.security.samsungmobile.com/serviceWeb.smsb

08 Jan 2026 19:46Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.13.3 - 5.5

EPSS0.00106

SSVC