CVE-2024-34614

HIGH

Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code.

Affects 1 product across 1 vendor.

CVSS 3.17.8
EPSS0.2%
Percentile6th
PatchPatched
CVSS Vector — Plain English Requires local access, low complexity, low privileges required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-787: Out-of-Bounds Write

Software writes data past buffer boundaries, corrupting memory and potentially enabling code execution.

◆ AI Analysis — automated analysis, not human-reviewed

An out-of-bound write vulnerability exists in libsmat.so prior to SMR Aug-2024 Release 1, which could allow local attackers to execute arbitrary code.

BSID: BS-2024-GLOBAL-194027-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2024-34614?
An out-of-bound write vulnerability exists in libsmat.so prior to SMR Aug-2024 Release 1, which could allow local attackers to execute arbitrary code.
What is the CVSS score for CVE-2024-34614?
CVE-2024-34614 has CVSS 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS: 0.2%.
Is CVE-2024-34614 actively exploited?
No confirmed active exploitation of CVE-2024-34614 as of 2026-05-30.
How do I remediate CVE-2024-34614?
Priority: HIGH. PSIRT: [email protected]
What systems are affected by CVE-2024-34614?
CVE-2024-34614 affects Samsung Android.
Vulnerability Details
CVE IDCVE-2024-34614
BSIDBS-2024-GLOBAL-194027-H BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published2024-08-07
Last Modified2024-08-12
ICS Relevance15%
Weakness (CWE)
Out-of-Bounds Write
SourceNVD
Official Description

Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability is due to an out-of-bound write in the libsmat.so library, which can be exploited by a local attacker to execute arbitrary code with the privileges of the process using the library.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductAffected Versions
Samsung Android 12.0 13.0 14.0
Remediation

No official vendor advisory link on record. See the CVE record →

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 800 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash54ebf063179e957dd4818f660a5664ef00c1cb83ef63f84bcb13fcd49b2aeaf5eccb9dfe59cd3d0069631e9f29049119fef8989803762c8f9b3aa52a7b453014
Related CVEs affecting Samsung
CVE-2012-4333 10.0 Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UM... CVE-2012-4334 10.0 The ConnectDDNS method in the (1) STWConfigNVR 1.1.13.15 and (2) STWConfig 1.... CVE-2012-4050 10.0 Multiple unspecified vulnerabilities in Google Chrome OS before 21.0.1180.50 ... CVE-2012-6429 10.0 Buffer overflow in the PrepareSync method in the SyncService.dll ActiveX cont... CVE-2011-4719 10.0 Multiple unspecified vulnerabilities in Google Chrome before 16.0.912.63 on t...
View all Samsung CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →