CVE-2024-20807: 
NixOS vulnerability analysis and mitigation

Implicit intent hijacking vulnerability in Samsung Email prior to version 6.1.90.16 allows local attacker to get sensitive information (Samsung Advisory). The vulnerability was discovered and disclosed in December 2023, affecting Samsung Email application versions before 6.1.90.16.

The vulnerability has been assigned a CVSS v3.1 Base Score of 3.3 (LOW) with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N. This indicates that the vulnerability requires local access, has low attack complexity, needs no privileges, requires user interaction, has a limited confidentiality impact, and no impact on integrity or availability (NVD).

The vulnerability allows local attackers to access sensitive information through implicit intent hijacking. The confidentiality impact is limited to sensitive information exposure, while there are no reported impacts on system integrity or availability (Samsung Advisory).

Samsung has released version 6.1.90.16 of the Email application that includes a patch to fix this vulnerability. Users are advised to update their Samsung Email application to the latest version to mitigate the risk (Samsung Advisory).