CVE-2024-49409

Summary

CVE-2024-49409 is a newly disclosed vulnerability affecting the Galaxy S24's Battery Full Capacity node. This issue allows local attackers to conduct an out-of-bounds write attack before the Sep-2024 Firmware update. By manipulating the affected component, hackers can write unintended data to out-of-bounds memory locations. Successful exploitation of this vulnerability requires system privileges, posing a significant risk to device security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.