CVE-2024-49408

Name of the Vulnerable Software and Affected Versions Galaxy S24 versions prior to Firmware update Sep-2024 Release

Description The issue is an out-of-bounds write in the usb driver, allowing local attackers to write out-of-bounds memory. This requires system privilege to trigger.

Recommendations For Galaxy S24 versions prior to Firmware update Sep-2024 Release, update to the Sep-2024 Release or later to resolve the issue. As a temporary workaround, consider restricting access to the usb driver to minimize the risk of exploitation.