CVE-2024-49409

MEDIUM EPSS 3.3%

Published Nov 6, 20241y ago · Modified Jun 17, 20262w ago

6.7 CVSS 3.1

Medium

Published Nov 6, 2024 1y ago

Last Modified Jun 17, 2026 2w ago

Description

Out-of-bounds write in Battery Full Capacity node prior to Firmware update Sep-2024 Release on Galaxy S24 allows local attackers to write out-of-bounds memory. System privilege is required for triggering this vulnerability.

CVSS Details

Base Score

6.7

Exploitability

0.8

Impact

5.9

Vector string

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector Local

Attack Complexity Low

Privileges Required High

User Interaction None

Scope Unchanged

Confidentiality High

Integrity High

Availability High

Threat Intelligence

EPSS Exploit Probability

3.3% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-787 Out-of-bounds Write Memory Safety

Affected Products 2

Vendor	Product	Version	Range
samsung	galaxy_s24_firmware	*	<2024-09
samsung	galaxy_s24	*	any

References 1

security.samsungmobile.com https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=09

Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.