CVE-2024-49417: Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities....

2.0 CVSS

Description

Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability.

Classification

CVE ID: CVE-2024-49417

CVSS Base Severity: LOW

CVSS Base Score: 2.0

Affected Products

Vendor: Samsung Mobile

Product: Smart Touch Call

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 11.44% (scored less or equal to compared to others)

EPSS Date: 2025-02-03 (when was this score calculated)

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=12

Timeline