VulnerabilityAnalyzed
CVE-2024-49417
Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities.
LOW 3.3EPSS 0.15%
Does this matter?
Lower severity and a low EPSS score (0.15%). Track it; it rarely justifies an emergency change on its own.
Description
Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability.
- CVSS 3.1
- 3.3 LOWCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
- EPSS
- 0.15% probability · 4th percentile
- CISA KEV
- Not listed
- Affected
- samsung/smart touch call
- Source
- mobile.security@samsung.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.