CVE-2024-20828

Improper authorization verification vulnerability in Samsung Internet prior to version 24.0 allows physical attackers to access files downloaded in SecretMode without proper authentication.

Score

CVSS 3.1 4.6 Medium

Status

Modified - mobile.security@samsung.com

Published

2024-02-06

Last modified

2024-08-01

Weaknesses

CWE-863

Affected products

• Internet (Samsung)
• Samsung Internet (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=02