What is CVE-2024-34597?

CVE-2024-34597 is a medium-severity vulnerability in Samsung Health, classified under CWE-20: IMPROPER INPUT VALIDATION. CVSS score: 4.4/10. Published 2024-07-02.

How severe is CVE-2024-34597?

Medium severity. CVSS v3 base score is 4.4 out of 10.

Vulnerability in Samsung Health

CVE-2024-34597

Improper input validation in Samsung Health prior to version 6.27.0.113 allows local attackers to write arbitrary document files to the sandbox of Samsung Health. User interaction is required for triggering this vulnerability.

EPSS: 0.002 (5.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.4 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L.

Affected products

Samsung Health
Samsung Mobile Health — versions 6.27.0.113

References

mobile.security@samsung.com (Vendor Advisory)

Frequently asked questions

What is CVE-2024-34597?: CVE-2024-34597 is a medium-severity vulnerability in Samsung Health, classified under CWE-20: IMPROPER INPUT VALIDATION. CVSS score: 4.4/10. Published 2024-07-02.
How severe is CVE-2024-34597?: Medium severity. CVSS v3 base score is 4.4 out of 10.