CVE-2024-20854

Summary

Improper handling of insufficient privileges vulnerability in Samsung Camera prior to versions 12.1.0.31 in Android 12, 13.1.02.07 in Android 13, and 14.0.01.06 in Android 14 allows local attackers to access image data.

Affected Software

VendorProductVersion RangeStatus
Samsung MobileSamsung Camera12.1.0.31 in Android 12, 13.1.02.07 in Android 13, and 14.0.01.06 in Android 14unaffected

Weaknesses

  • CWE-280: Improper Handling of Insufficient Permissions or Privileges

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References