cve.bz

samsung android vulnerabilities, newest first, page 6

Filter
  1. 5.5CVE-2024-34604EPSS 0.1%

    Improper access control in LedCoverService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.

  2. 5.5CVE-2024-34603EPSS 0.1%

    Improper access control in Samsung Message prior to SMR Jul-2024 Release 1 allows local attackers to access location data.

  3. 5.5CVE-2024-34602EPSS 0.2%

    Use of implicit intent for sensitive communication in Samsung Messages prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability.

  4. 7.8CVE-2024-34595EPSS 0.2%

    Improper access control in clickAdapterItem of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities.

  5. 5.5CVE-2024-34594EPSS 0.2%

    Exposure of sensitive information in proc file system prior to SMR Jul-2024 Release 1 allows local attackers to read kernel memory address.

  6. 8.8CVE-2024-34593EPSS 0.6%

    Improper input validation in parsing and distributing RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulner…

  7. 4.3CVE-2024-34592EPSS 0.4%

    Improper input validation in parsing RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability.

  8. 4.3CVE-2024-34591EPSS 0.4%

    Improper input validation in parsing an item data from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerabi…

  9. 4.3CVE-2024-34590EPSS 0.4%

    Improper input validation혻in parsing an item type from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerabi…

  10. 6.5CVE-2024-34589EPSS 0.4%

    Improper input validation in parsing RTCP RR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability.

  11. 6.5CVE-2024-34588EPSS 0.4%

    Improper input validation혻in parsing RTCP SR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability.

  12. 6.8CVE-2024-34587EPSS 0.5%

    Improper input validation in parsing application information from RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering…

  13. 3.3CVE-2024-34586EPSS 0.1%

    Improper access control in KnoxCustomManagerService prior to SMR Jul-2024 Release 1 allows local attackers to configure Knox privacy policy.

  14. 7.8CVE-2024-34585EPSS 0.1%

    Improper access control in launchApp of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities.

  15. 3.3CVE-2024-34583EPSS 0.1%

    Improper access control in system property prior to SMR Jul-2024 Release 1 allows local attackers to get device identifier.

  16. 7.8CVE-2024-20901EPSS 0.2%

    Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local attackers to write out-of-bounds memory.

  17. 3.3CVE-2024-20900EPSS 0.1%

    Improper authentication in MTP application prior to SMR Jul-2024 Release 1 allows local attackers to enter MTP mode without proper authentication.

  18. 5.5CVE-2024-20899EPSS 0.1%

    Use of implicit intent for sensitive communication in RCS function in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.

  19. 5.5CVE-2024-20898EPSS 0.1%

    Use of implicit intent for sensitive communication in SoftphoneClient in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.

  20. 5.5CVE-2024-20897EPSS 0.1%

    Use of implicit intent for sensitive communication in FCM function in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.

  21. 5.5CVE-2024-20896EPSS 0.1%

    Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.

  22. 5.5CVE-2024-20895EPSS 0.1%

    Improper access control in Dar service prior to SMR Jul-2024 Release 1 allows local attackers to bypass restriction for calling SDP features.

  23. 4.3CVE-2024-20894EPSS 0.2%

    Improper handling of exceptional conditions in Secure Folder prior to SMR Jul-2024 Release 1 allows physical attackers to bypass authentication under certain condition. User interaction is required for triggering this vulnerability.

  24. 7.8CVE-2024-20893EPSS 0.2%

    Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows local attackers to trigger memory corruption.

  25. 7.8CVE-2024-20892EPSS 0.1%

    Improper verification of signature in FilterProvider prior to SMR Jul-2024 Release 1 allows local attackers to execute privileged behaviors. User interaction is required for triggering this vulnerability.

  26. 7.8CVE-2024-20891EPSS 0.1%

    Improper access control in launchFullscreenIntent of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities.

  27. 8.8CVE-2024-20890EPSS 0.2%

    Improper input validation in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to trigger abnormal behavior.

  28. 4.3CVE-2024-20889EPSS 0.2%

    Improper authentication in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to pair with devices.

  29. 7.8CVE-2024-20888EPSS 0.2%

    Improper access control in OneUIHome prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability.

  30. 3.3CVE-2024-20885EPSS 0.1%

    Improper component protection vulnerability in Samsung Dialer prior to SMR May-2024 Release 1 allows local attackers to make a call without proper permission.

  31. 7.8CVE-2024-20884EPSS 0.1%

    Incorrect use of privileged API vulnerability in getSemBatteryUsageStats in BatteryStatsService prior to SMR Jun-2024 Release 1 allows local attackers to use privileged API.

  32. 7.8CVE-2024-20883EPSS 0.1%

    Incorrect use of privileged API vulnerability in registerBatteryStatsCallback in BatteryStatsService prior to SMR Jun-2024 Release 1 allows local attackers to use privileged API.

  33. 4.6CVE-2024-20882EPSS 0.2%

    Out-of-bounds read vulnerability in bootloader prior to SMR June-2024 Release 1 allows physical attackers to arbitrary data access.

  34. 6.7CVE-2024-20881EPSS 0.2%

    Improper input validation vulnerability in chnactiv TA prior to SMR Jun-2024 Release 1 allows local privileged attackers lead to potential arbitrary code execution.

  35. 6.8CVE-2024-20880EPSS 0.2%

    Stack-based buffer overflow vulnerability in bootloader prior to SMR Jun-2024 Release 1 allows physical attackers to overwrite memory.

  36. 7.1CVE-2024-20879EPSS 0.1%

    Improper input validation vulnerability in libsavscmn.so prior to SMR Jun-2024 Release 1 allows local attackers to write out-of-bounds memory.

  37. 7.8CVE-2024-20878EPSS 0.2%

    Heap out-of-bound write vulnerability in parsing grid image in libsavscmn.so prior to SMR June-2024 Release 1 allows local attackers to execute arbitrary code.

  38. 7.8CVE-2024-20877EPSS 0.2%

    Heap out-of-bound write vulnerability in parsing grid image header in libsavscmn.so prior to SMR Jun-2024 Release 1 allows local attackers to execute arbitrary code.

  39. 7.8CVE-2024-20876EPSS 0.1%

    Improper input validation in libsheifdecadapter.so prior to SMR Jun-2024 Release 1 allows local attackers to lead to memory corruption.

  40. 5.5CVE-2024-20875EPSS 0.1%

    Improper caller verification vulnerability in SemClipboard prior to SMR June-2024 Release 1 allows local attackers to access arbitrary files.

  41. 7.8CVE-2024-20874EPSS 0.2%

    Improper access control vulnerability in SmartManagerCN prior to SMR Jun-2024 Release 1 allows local attackers to launch privileged activities.

  42. 6.0CVE-2024-20873EPSS 0.1%

    Improper input validation vulnerability in caminfo driver prior to SMR Jun-2024 Release 1 allows local privileged attackers to write out-of-bounds memory.

  43. 3.3CVE-2024-20872EPSS 0.1%

    Improper handling of insufficient privileges vulnerability in TalkbackSE prior to version Android 14 allows local attackers to modify setting value of TalkbackSE.

  44. 6.6CVE-2024-20866EPSS 0.3%

    Authentication bypass vulnerability in Setupwizard prior to SMR May-2024 Release 1 allows physical attackers to skip activation step.

  45. 6.8CVE-2024-20865EPSS 0.3%

    Authentication bypass in bootloader prior to SMR May-2024 Release 1 allows physical attackers to flash arbitrary images.

  46. 5.5CVE-2024-20864EPSS 0.2%

    Improper access control vulnerability in DarManagerService prior to SMR May-2024 Release 1 allows local attackers to monitor system resources.

  47. 6.7CVE-2024-20863EPSS 0.2%

    Out of bounds write vulnerability in SNAP in HAL prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code.

  48. 6.7CVE-2024-20862EPSS 0.2%

    Out-of-bounds write in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code.

  49. 6.7CVE-2024-20861EPSS 0.2%

    Use after free vulnerability in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to cause memory corruption.

  50. 3.3CVE-2024-20860EPSS 0.1%

    Improper export of android application components vulnerability in TelephonyUI prior to SMR May-2024 Release 1 allows local attackers to reboot the device without proper permission.