CVE-2024-20883

6.2 MEDIUM

📋 TL;DR

This vulnerability allows local attackers to misuse a privileged API in Samsung's BatteryStatsService. It affects Samsung devices running Android versions prior to the June 2024 security update. Attackers need local access to the device to exploit this.

💻 Affected Systems

Products:
  • Samsung mobile devices
Versions: Android versions prior to SMR Jun-2024 Release 1
Operating Systems: Android
Default Config Vulnerable: ⚠️ Yes
Notes: Specifically affects Samsung's implementation of BatteryStatsService in their Android devices.

📦 What is this software?

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

Android by Samsung

Android is Google's open-source mobile operating system powering over 3 billion devices worldwide, including smartphones, tablets, smart TVs, automotive systems, wearables, and IoT devices. As the world's dominant mobile OS with approximately 72% global market share, Android serves as the foundation...

Learn more about Android →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Local privilege escalation allowing attackers to gain elevated system privileges, potentially accessing sensitive system data or performing unauthorized actions.

🟠

Likely Case

Unauthorized access to battery statistics and system information that should be restricted to privileged applications only.

🟢

If Mitigated

Limited impact with proper access controls and device security policies in place.

🌐 Internet-Facing: LOW - Requires local device access, not remotely exploitable.
🏢 Internal Only: MEDIUM - Local attackers on compromised devices could exploit this for privilege escalation.

🎯 Exploit Status

Public PoC: ✅ No
Weaponized: UNKNOWN
Unauthenticated Exploit: ✅ No
Complexity: MEDIUM

Requires local access to device and knowledge of privileged API misuse techniques.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: SMR Jun-2024 Release 1

Vendor Advisory: https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=06

Restart Required: Yes

Instructions:

1. Check for system updates in device settings. 2. Install the June 2024 security update. 3. Restart device after installation completes.

🔧 Temporary Workarounds

Restrict local access

all

Limit physical and local access to devices to prevent exploitation by unauthorized users.

🧯 If You Can't Patch

  • Implement strict device access controls and monitoring
  • Consider isolating affected devices from sensitive networks

🔍 How to Verify

Check if Vulnerable:

Check Android security patch level in Settings > About phone > Software information. If before June 2024, device is vulnerable.

Check Version:

adb shell getprop ro.build.version.security_patch

Verify Fix Applied:

Verify security patch level shows 'June 1, 2024' or later in device settings.

📡 Detection & Monitoring

Log Indicators:

  • Unusual BatteryStatsService API calls from non-privileged applications
  • Unexpected privilege escalation attempts

Network Indicators:

  • None - local exploitation only

SIEM Query:

Look for BatteryStatsService access patterns from unauthorized processes

🔗 References

📤 Share & Export