CVE-2024-20824: Samsung Galaxy Store

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Implicit intent hijacking vulnerability in VoiceSearch of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent.

Affected products

• Samsung Galaxy Store: before 4.5.63.6 (fixed in 4.5.63.6)

Published 2024-02-06. Last modified 2026-06-17.