CVE-2024-49409

Name of the Vulnerable Software and Affected Versions Galaxy S24 versions prior to Firmware update Sep-2024 Release

Description The issue is related to an out-of-bounds write in the Battery Full Capacity node, allowing local attackers to write out-of-bounds memory. System privilege is required for triggering this issue.

Recommendations For Galaxy S24 versions prior to Firmware update Sep-2024 Release, update to the Sep-2024 Release or later to resolve the issue. As a temporary workaround, consider restricting system privileges to minimize the risk of exploitation.