{"cve":{"cve_id":"CVE-2024-20839","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.00252,"epss_percentile":0.16246,"epss_as_of":"2026-06-23","description":"Improper access control in Samsung Voice Recorder prior to versions 21.5.16.01 in Android 12 and Android 13, 21.4.51.02 in Android 14 allows physical attackers to access recording files on the lock screen.","published_at":"2024-03-05T04:44:48.626000Z","last_modified_at":null,"cvss_v3_score":4.6,"cvss_v3_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_v3_severity":"MEDIUM","cvss_v4_score":null,"cvss_v4_vector":null,"cvss_v4_severity":null,"ssvc_decision":null,"ssvc_exploitation":"none","ssvc_automatable":false,"ssvc_technical_impact":"partial","cwes":null,"nvd_references":["https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=03"],"vuln_status":null,"trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-24T00:09:39.878444Z","updated_at":"2026-06-29T01:52:13.459991Z"},"effective_severity":"MEDIUM","badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"P","value_label":"Physical"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"PR","name":"Privileges Required","value":"N","value_label":"None"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"S","name":"Scope","value":"U","value_label":"Unchanged"},{"metric":"C","name":"Confidentiality","value":"H","value_label":"High"},{"metric":"I","name":"Integrity","value":"N","value_label":"None"},{"metric":"A","name":"Availability","value":"N","value_label":"None"}]},"cvss_v4_decoded":{"version":null,"metrics":[]},"affected":[{"vendor_slug":"samsung-mobile","vendor_name":"Samsung Mobile","product_slug":"samsung-voice-recorder","product_name":"Samsung Voice Recorder","version_start":"21.5.16.01 in Android 12 and Android 13, 21.4.51.02 in Android 14","version_start_inclusive":true,"version_end":"21.5.16.01 in Android 12 and Android 13, 21.4.51.02 in Android 14","version_end_inclusive":true,"cpe23_uri":"cve5:samsung-mobile:samsung-voice-recorder:21.5.16.01 in Android 12 and Android 13, 21.4.51.02 in Android 14:21.5.16.01 in Android 12 and Android 13, 21.4.51.02 in Android 14"}],"exploit_refs":[],"news":[],"references":[{"url":"https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=03","source_type":"MISC","tags":[]}],"timeline":[{"type":"published","at":"2024-03-05T04:44:48.626000Z","label":"CVE published","source":null},{"type":"cvss_changed","at":"2026-06-28T17:33:42.872393Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T17:33:42.872393Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T17:33:42.872393Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"ssvc_changed","at":"2026-06-29T01:52:13.459991Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-29T01:52:13.459991Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-29T01:52:13.459991Z","label":"SSVC decision revised","source":"vulnrichment"}]}