CVE-2024-20840: Samsung Voice Recorder

Low severity, CVSS 2.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper access control in Samsung Voice Recorder prior to versions 21.5.16.01 in Android 12 and Android 13, 21.4.51.02 in Android 14 allows physical attackers using hardware keyboard to use VoiceRecorder on the lock screen.

Affected products

• Samsung Voice Recorder: before 21.5.16.01 (fixed in 21.5.16.01); before 21.4.51.02 (fixed in 21.4.51.02)

Published 2024-03-05. Last modified 2026-06-17.