CVE-2024-49422 | THREATINT

Description

Protection Mechanism Failure in bootloader prior to SMR Oct-2024 Release 1 allows physical attackers to reset lockscreen failure count by hardware fault injection. User interaction is required for triggering this vulnerability.

PUBLISHED Reserved 2024-10-15 | Published 2024-12-31 | Updated 2024-12-31 | Assigner SamsungMobile

MEDIUM: 5.2CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L

Problem types

CWE-693: Protection Mechanism Failure

Product status

Default status

affected

SMR Oct-2024 Release in Select Android 13 devices using Unisoc chipset

unaffected

References

security.samsungmobile.com/...Update.smsb?year=2024&month=10

cve.org (CVE-2024-49422)

nvd.nist.gov (CVE-2024-49422)

Download JSON