Samsung Video Player vulnerabilities

3 CVEs affecting Samsung Video Player, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-49404, published 2024-11-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-24927, published 2022-02-11. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper privilege management vulnerability in Samsung Video Player prior to version 7.3.15.30 allows attackers to execute video files without permission.
CVE-2024-49404, published 2024-11-06. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. Improper Access Control in Samsung Video Player prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.3.41.230 in Android 14 allows physical attackers to access video file of other…
CVE-2024-34672, published 2024-10-08. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Improper input validation in SamsungVideoPlayer prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.3.41.230 in Android 14 allows local attackers to access video file of other…