Vulnerability in Samsung Smart Touch Call
CVE-2024-49417
Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability.
EPSS: 0.001 (4.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 2.0 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N.
Affected products
- Samsung Smart_touch_call
- Samsung Mobile Smart Touch Call — versions 1.0.0.8
References
- mobile.security@samsung.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2024-49417?
- CVE-2024-49417 is a low-severity vulnerability in Samsung Smart Touch Call, classified under CWE-927 : USE OF IMPLICIT INTENT FOR SENSITIVE COMMUNICATION. CVSS score: 2.0/10. Published 2024-12-03.
- How severe is CVE-2024-49417?
- Low severity. CVSS v3 base score is 2.0 out of 10.