CVE-2024-20839
MEDIUMSamsung Voice Recorder <21.5.16.01-21.4.51.02 - Info Disclosure
Title source: llmDescription
Improper access control in Samsung Voice Recorder prior to versions 21.5.16.01 in Android 12 and Android 13, 21.4.51.02 in Android 14 allows physical attackers to access recording files on the lock screen.
References (1)
Core 1
Core References
Scores
CVSS v3
4.6
EPSS
0.0008
EPSS Percentile
22.8%
Attack Vector
PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
Status
published
Products (1)
samsung/voice_recorder
< 21.5.16.01
Published
Mar 05, 2024
Tracked Since
Feb 18, 2026