CVE-2024-34619

Summary

Improper input validation in librtp.so prior to SMR Aug-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.

Affected Software

VendorProductVersion RangeStatus
Samsung MobileSamsung Mobile DevicesSMR Aug-2024 Release in Android 12, 13, 14unaffected

Weaknesses

  • CWE-1288: Improper Validation of Consistency within Input

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References