CVE-2024-49414 | Vulnetix

CVE-2024-49414 PUBLISHED CVSS 2.4 LOW

Reported by samsungmobile · Published December 3, 2024

Authentication Bypass Using an Alternate Path in Dex Mode prior to SMR Dec-2024 Release 1 allows physical attackers to temporarily access to recent app list.

Risk scores

CVSS 3.1

2.4

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Vendor	Product	Versions
Samsung Mobile	Samsung Mobile Devices	SMR Dec-2024 Release in Android 12, 13, 14
samsung	android	13.0, 14.0, 12.0
Samsung Mobile	Samsung Mobile Devices	SMR Dec-2024 Release in Android 12, 13, 14

Timeline

Dec 2, 2024 CVE Published
Dec 3, 2024 PoC Published (2 in total, the first dated here)
Dec 3, 2024 CVE Updated
Dec 4, 2024 EPSS Score (30 in total, the first dated here)
Dec 22, 2024 Coalition ESS Score (6 in total, the first dated here)
Jun 2, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2024-49414
vulnetix vdb fixes CVE-2024-49414

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-49414/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →