Read the docs
TI-2024-33002 Aliases CVE-2024-49417GHSA-6q38-g7r3-7hj3

Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8…

Priority LOW 15Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00146 3rd percentileScored 2026-11-07
Fix Fixed Smart Touch Call (Samsung Mobile): 1.0.0.8

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SamsungSmart Touch Call—1.0.0.8Patch availableCNA
  • Smart Touch Call VendorSamsung Affected — Fixed in 1.0.0.8 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:samsung:smart_touch_call:*:*:*:*:*:*:*:*before 1.0.0.8VulnerableSamsung
  • cpe:2.3:a:samsung:smart_touch_call:*:*:*:*:*:*:*:* Versions before 1.0.0.8 Vulnerable ·Samsung

Remediation

  • Fix · CNA Smart Touch Call (Samsung Mobile) Fixed in 1.0.0.8

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-49417
  2. 2026-10-03 Alias added: GHSA-6q38-g7r3-7hj3

References

Advisory 1

  • TI-2025-36245 Improper verification of source of a communication channel in SmartTouchCall prior to… CVSS 3.1MEDIUM 6.5
  • TI-2021-07687 Improper access control in Samsung Smart Touch Call CVSS 3.1MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences