CVE-2024-40239

MEDIUM 6.8CVE-2024-40239 · Published 08/11/2024 · updated 17/06/2026

In short

CVE-2024-40239 is a MEDIUM (CVSS 6.8) vulnerability affecting life (hitbytes).
Chance of exploitation in the next 30 days (EPSS): 0.26%, higher than 17.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
life hitbytes	`= 17.5.0`	No fix yet

Description

An incorrect access control issue in Life: Personal Diary, Journal android app 17.5.0 allows a physically proximate attacker to escalate privileges via the fingerprint authentication function.

References

play.google.com/store/apps/details · Product
zzzxiin.github.io/post/life-personal-diary · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free