CVE Feed

    Dashboard / CVE / CVE-2024-34661

    CVE-2024-34661

    Improper handling of insufficient permissions in Samsung Assistant prior to version 9.1.00.7 allows remote attackers to access location data. User interaction is required for triggering this vulnerability.

    Published:Sep 4, 2024
    Last Modified:Sep 5, 2024
    EPS:Sep 4, 2024
    EPSS Score:0.00088
    CVSS Score:4.3

    Affected Products

    Vendor
    Samsung
    Product
    Assistant

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-276 Incorrect Default Permissions

    Related CVEs

    CVE-2026-21033 (CVSS 6.9) — Improper export of android application components in ExpressHomeWidgetReceiver of Samsung Assistant prior to v…
    CVE-2026-21032 (CVSS 6.9) — Improper export of android application components in SmartHomeWidgetReceiver of Samsung Assistant prior to ver…
    CVE-2026-20993 (CVSS 4.8) — Improper export of android application components in Samsung Assistant prior to version 9.3.10.7 allows local …
    CVE-2025-58484 (CVSS 4) — Incorrect default permissions in Samsung Cloud Assistant prior to version 8.0.03.8 allows local attacker to ac…
    CVE-2025-21040 (CVSS 5.1) — Improper verification of intent by ExternalBroadcastReceiver in S Assistant prior to version 9.3.2 allows loca…
    CVE-2025-21039 (CVSS 5.1) — Improper verification of intent by SystemExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 al…
    CVE-2025-21038 (CVSS 5.1) — Improper verification of intent by SamsungExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 a…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High