CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2024-20802

Improper access control vulnerability in Samsung DeX prior to SMR Jan-2024 Release 1 allows owner to access other users' notification in a multi-user environment.

Status: Published
Published: 2024-01-04
Updated: 2025-05-12
Assigning organization: SamsungMobile

Description

Improper access control vulnerability in Samsung DeX prior to SMR Jan-2024 Release 1 allows owner to access other users' notification in a multi-user environment.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Samsung Mobile Samsung Mobile Devices

Default version status: affected

SMR Jan-2024 Release in Selected Android 13 devicesunaffected

References

https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=01 ↗

CVE-2024-20802

Improper access control vulnerability in Samsung DeX prior to SMR Jan-2024 Release 1 allows owner to access other users&#39; notification in a multi-user environment.

Description

Affected products

Samsung Mobile Samsung Mobile Devices

References

Improper access control vulnerability in Samsung DeX prior to SMR Jan-2024 Release 1 allows owner to access other users' notification in a multi-user environment.