CVE-2024-34676 — Vulnetix

Try Vulnetix Request Demo

CVE-2024-34676 PUBLISHED CVSS 4.400000095367432 MEDIUM

Out-of-bounds write in parsing subtitle file in libsubextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption. User interaction is required for triggering this vulnerability.

EPSS 0.16% · 37.5th percentile

Risk Scores

CVSS v3.1

4.400000095367432

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

EPSS Score

0.16%

37.5th percentile

Affected Products

Vendor	Product	Versions
Samsung Mobile	Samsung Mobile Devices	SMR Nov-2024 Release in Android 12, 13, 14
samsung	android	12.0, 12.0, 12.0

Timeline

Nov 6, 2024 EPSS Score
Nov 6, 2024 Coalition ESS Score
Nov 6, 2024 Coalition ESS Score
Nov 6, 2024 CVE Published
Nov 6, 2024 PoC Published
Nov 6, 2024 PoC Published
Nov 12, 2024 CVE Updated
Nov 13, 2024 Coalition ESS Score
Nov 23, 2024 EPSS Score
Dec 12, 2024 EPSS Score
Dec 29, 2024 EPSS Score
Jan 15, 2025 EPSS Score

References

Open in Interactive Console →