CVE-2024-58101

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

Samsung Galaxy Buds and Galaxy Buds 2 audio devices are Bluetooth pairable by default without user input nor a way to stop this mode. As a consequence, audio playback takeover or even microphone recording without user consent or notification is achieved. Note: This is considered a low severity vulnerability by the vendor.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published: May 14, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-581026.5An issue was discovered in Datalust Seq before 2024.3.13545. An insecure default parsing depth limit allows stack consumption when parsing u CVE-2024-581035.8Square Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt.CVE-2024-581047.8A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing s CVE-2024-581057.8A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing s CVE-2024-581067.5Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-581077.5Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-581087.5Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-581097.5Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-58115.4The Simple Video Directory WordPress plugin before 1.4.4 does not sanitise and escape some of its settings, which could allow contributors a CVE-2024-581107.5Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-581117.5Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerabili CVE-2024-581127.5Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerabili