CVE-2024-34661

—

CVSS 3.1

4.3 medium

EPSS

<1%p27

Published

Sep 4, 2024 (Sep 4, 2024)

Modified

Jun 17, 2026

Description

Improper handling of insufficient permissions in Samsung Assistant prior to version 9.1.00.7 allows remote attackers to access location data. User interaction is required for triggering this vulnerability.

Vendors: samsung
Products: assistant
Weakness: CWE-276
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.