Lucene search
HistoryApr 02, 2024 - 3:15 a.m.
CVE-2024-20854
samsung camera
insufficient privileges
android 12
android 13
android 14
image data
vulnerability
CVSS3
5.9
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
AI Score
5.5
Confidence
High
EPSS
0
Percentile
9.0%
Improper handling of insufficient privileges vulnerability in Samsung Camera prior to versions 12.1.0.31 in Android 12, 13.1.02.07 in Android 13, and 14.0.01.06 in Android 14 allows local attackers to access image data.
Related
cve
cve
CVE-2024-20854
2024-04-02 03:15:10
cvelist
cvelist
CVE-2024-20854
2024-04-02 02:59:50
vulnrichment
vulnrichment
CVE-2024-20854
2024-04-02 02:59:50
CVSS3
5.9
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
AI Score
5.5
Confidence
High
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-20854