{"cve":{"cve_id":"CVE-2024-20854","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.00138,"epss_percentile":0.03495,"epss_as_of":"2026-06-23","description":"Improper handling of insufficient privileges vulnerability in Samsung Camera prior to versions 12.1.0.31 in Android 12, 13.1.02.07 in Android 13, and 14.0.01.06 in Android 14 allows local attackers to access image data.","published_at":"2024-04-02T02:59:50.530000Z","last_modified_at":null,"cvss_v3_score":5.9,"cvss_v3_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss_v3_severity":"MEDIUM","cvss_v4_score":null,"cvss_v4_vector":null,"cvss_v4_severity":null,"ssvc_decision":null,"ssvc_exploitation":"none","ssvc_automatable":false,"ssvc_technical_impact":"partial","cwes":null,"nvd_references":["https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=04"],"vuln_status":null,"trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-24T00:09:39.878444Z","updated_at":"2026-06-29T01:52:13.459991Z"},"effective_severity":"MEDIUM","badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"L","value_label":"Local"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"PR","name":"Privileges Required","value":"N","value_label":"None"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"S","name":"Scope","value":"U","value_label":"Unchanged"},{"metric":"C","name":"Confidentiality","value":"L","value_label":"Low"},{"metric":"I","name":"Integrity","value":"L","value_label":"Low"},{"metric":"A","name":"Availability","value":"L","value_label":"Low"}]},"cvss_v4_decoded":{"version":null,"metrics":[]},"affected":[{"vendor_slug":"samsung-mobile","vendor_name":"Samsung Mobile","product_slug":"samsung-camera","product_name":"Samsung Camera","version_start":"12.1.0.31 in Android 12, 13.1.02.07 in Android 13, and 14.0.01.06 in Android 14","version_start_inclusive":true,"version_end":"12.1.0.31 in Android 12, 13.1.02.07 in Android 13, and 14.0.01.06 in Android 14","version_end_inclusive":true,"cpe23_uri":"cve5:samsung-mobile:samsung-camera:12.1.0.31 in Android 12, 13.1.02.07 in Android 13, and 14.0.01.06 in Android 14:12.1.0.31 in Android 12, 13.1.02.07 in Android 13, and 14.0.01.06 in Android 14"}],"exploit_refs":[],"news":[],"references":[{"url":"https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=04","source_type":"MISC","tags":[]}],"timeline":[{"type":"published","at":"2024-04-02T02:59:50.530000Z","label":"CVE published","source":null},{"type":"cvss_changed","at":"2026-06-28T17:33:42.872393Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T17:33:42.872393Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T17:33:42.872393Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"ssvc_changed","at":"2026-06-29T01:52:13.459991Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-29T01:52:13.459991Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-29T01:52:13.459991Z","label":"SSVC decision revised","source":"vulnrichment"}]}