CVE-2024-34679 — Vulnetix

Try Vulnetix Request Demo

CVE-2024-34679 PUBLISHED CVSS 4 MEDIUM

Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone privilege.

EPSS 0.06% · 19.9th percentile

Risk Scores

CVSS v3.1

4

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS Score

0.06%

19.9th percentile

Affected Products

Vendor	Product	Versions
Samsung Mobile	Samsung Mobile Devices	SMR Nov-2024 Release in Android 14
samsung	android	14.0, 14.0, 14.0

Timeline

Nov 6, 2024 EPSS Score
Nov 6, 2024 Coalition ESS Score
Nov 6, 2024 CVE Published
Nov 6, 2024 PoC Published
Nov 6, 2024 PoC Published
Nov 12, 2024 Coalition ESS Score
Nov 12, 2024 CVE Updated
Nov 23, 2024 EPSS Score
Dec 12, 2024 EPSS Score
Dec 29, 2024 EPSS Score
Jan 15, 2025 EPSS Score
Feb 2, 2025 EPSS Score

References

Open in Interactive Console →