VULNERABILITY INTELLIGENCE

CVE-2024-34597

CVSS score4.4 MEDIUM
EPSS probability0.15%
CISA KEVNot currently listed
Published2024-07-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Description

Improper input validation in Samsung Health prior to version 6.27.0.113 allows local attackers to write arbitrary document files to the sandbox of Samsung Health. User interaction is required for triggering this vulnerability.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references