CVE-2024-20824

Implicit intent hijacking vulnerability in VoiceSearch of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent.

Score

CVSS 3.1 5.5 Medium

Status

Modified - mobile.security@samsung.com

Published

2024-02-06

Last modified

2024-08-01

Affected products

• Galaxy Store (Samsung)
• Galaxy Store (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=02