Cyber Resilience

CVE-2024-20854

Medium

Published: 02 April 2024

Published
02 April 2024
Modified
10 October 2025
KEV Added
—
Patch
—
CVSS Score v3.1 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
EPSS Score 0.0010 27.2th percentile
Risk Priority 12 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-20854 is a medium-severity an unspecified weakness vulnerability in Samsung Camera. Its CVSS base score is 5.9 (Medium).

Operationally, ranked at the 27.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

Improper handling of insufficient privileges vulnerability in Samsung Camera prior to versions 12.1.0.31 in Android 12, 13.1.02.07 in Android 13, and 14.0.01.06 in Android 14 allows local attackers to access image data.

CWE(s)
NVD-CWE-Other

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

samsung
camera
≤ 12.1.0.31 · ≤ 13.1.02.07 · ≤ 14.0.01.06

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References