cve.bz

samsung android vulnerabilities, newest first, page 8

Filter
  1. 5.5CVE-2023-42556EPSS 0.2%

    Improper usage of implicit intent in Contacts prior to SMR Dec-2023 Release 1 allows attacker to get sensitive information.

  2. 7.8CVE-2023-42538EPSS 0.2%

    An improper input validation in saped_rec_silence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.

  3. 7.8CVE-2023-42537EPSS 0.2%

    An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.

  4. 7.8CVE-2023-42536EPSS 0.2%

    An improper input validation in saped_dec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.

  5. 7.8CVE-2023-42535EPSS 0.2%

    Out-of-bounds Write in read_block of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code.

  6. 5.5CVE-2023-42534EPSS 0.2%

    Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to read arbitrary files with system privilege.

  7. 6.8CVE-2023-42533EPSS 0.4%

    Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execute arbitrary code in Kernel.

  8. 7.5CVE-2023-42532EPSS 0.4%

    Improper Certificate Validation in FotaAgent prior to SMR Nov-2023 Release1 allows remote attacker to intercept the network traffic including Firmware information.

  9. 7.1CVE-2023-42531EPSS 0.2%

    Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass restrictions on starting activities from the background.

  10. 7.5CVE-2023-42530EPSS 0.4%

    Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct without User Interaction.

  11. 7.8CVE-2023-42529EPSS 0.2%

    Out-of-bound write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to execute arbitrary code.

  12. 7.8CVE-2023-42528EPSS 0.2%

    Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code.

  13. 5.5CVE-2023-42527EPSS 0.2%

    Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to expose sensitive information.

  14. 7.8CVE-2023-30739EPSS 0.2%

    Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code.

  15. 7.8CVE-2023-30733EPSS 0.2%

    Stack-based Buffer Overflow in vulnerability HDCP trustlet prior to SMR Oct-2023 Release 1 allows local privileged attackers to perform code execution.

  16. 3.3CVE-2023-30732EPSS 0.2%

    Improper access control in system property prior to SMR Oct-2023 Release 1 allows local attacker to get CPU serial number.

  17. 4.6CVE-2023-30731EPSS 0.2%

    Logic error in package installation via debugger command prior to SMR Oct-2023 Release 1 allows physical attacker to install an application that has different build type.

  18. 7.5CVE-2023-30727EPSS 0.4%

    Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi and connect arbitrary Wi-Fi without User Interaction.

  19. 7.8CVE-2023-30692EPSS 0.2%

    Improper input validation vulnerability in Evaluator prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities.

  20. 7.8CVE-2023-30690EPSS 0.2%

    Improper input validation vulnerability in Duo prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities.

  21. 4.4CVE-2023-30721EPSS 0.2%

    Insertion of sensitive information into log vulnerability in Locksettings prior to SMR Sep-2023 Release 1 allows a privileged local attacker to get lock screen match information from the log.

  22. 5.5CVE-2023-30720EPSS 0.1%

    PendingIntent hijacking in LmsAssemblyTrackerCTC prior to SMR Sep-2023 Release 1 allows local attacker to gain arbitrary file access.

  23. 3.3CVE-2023-30719EPSS 0.2%

    Exposure of Sensitive Information vulnerability in InboundSmsHandler prior to SMR Sep-2023 Release 1 allows local attackers to access certain message data.

  24. 3.3CVE-2023-30718EPSS 0.1%

    Improper export of android application components vulnerability in WifiApAutoHotspotEnablingActivity prior to SMR Sep-2023 Release 1 allows local attacker to change a Auto Hotspot setting.

  25. 3.3CVE-2023-30717EPSS 0.2%

    Sensitive information exposure vulnerability in SVCAgent prior to SMR Sep-2023 Release 1 allows attackers to get unresettable identifiers.

  26. 5.5CVE-2023-30716EPSS 0.2%

    Improper access control vulnerability in SVCAgent prior to SMR Sep-2023 Release 1 allows attackers to trigger certain commands.

  27. 3.3CVE-2023-30715EPSS 0.2%

    Improper access control vulnerability in Weather prior to SMR Sep-2023 Release 1 allows attackers to access location information set in Weather without permission.

  28. 4.6CVE-2023-30714EPSS 0.2%

    Improper authorization vulnerability in FolderContainerDragDelegate in One UI Home prior to SMR Sep-2023 Release 1 allows physical attackers to change some settings of the folder lock.

  29. 5.5CVE-2023-30713EPSS 0.1%

    Improper privilege management vulnerability in FolderLockNotifier in One UI Home prior to SMR Sep-2023 Release 1 allows local attackers to change some settings of the folder lock.

  30. 7.8CVE-2023-30712EPSS 0.2%

    Improper input validation in Settings Suggestions prior to SMR Sep-2023 Release 1 allows attackers to launch arbitrary activity.

  31. 3.3CVE-2023-30711EPSS 0.2%

    Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider.

  32. 7.8CVE-2023-30710EPSS 0.2%

    Improper input validation vulnerability in Knox AI prior to SMR Sep-2023 Release 1 allows local attackers to launch privileged activities.

  33. 6.7CVE-2023-30709EPSS 0.2%

    Improper access control in Dual Messenger prior to SMR Sep-2023 Release 1 allows local attackers launch activity with system privilege.

  34. 7.5CVE-2023-30708EPSS 0.6%

    Improper authentication in SecSettings prior to SMR Sep-2023 Release 1 allows attacker to access Captive Portal Wi-Fi in Reactivation Lock status.

  35. 7.1CVE-2023-30707EPSS 0.2%

    Improper input validation vulnerability in FileProviderStatusReceiver in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows local attackers to delete arbitrary files with Samsung Keyboard privilege.

  36. 4.9CVE-2023-30706EPSS 0.5%

    Improper authorization in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows attacker to read arbitrary file with system privilege.

  37. 5.5CVE-2023-30701EPSS 0.1%

    PendingIntent hijacking in WifiGeofenceManager prior to SMR Aug-2023 Release 1 allows local attacker to arbitrary file access.

  38. 3.3CVE-2023-30700EPSS 0.1%

    PendingIntent hijacking vulnerability in SemWifiApTimeOutImpl in framework prior to SMR Aug-2023 Release 1 allows local attackers to access ContentProvider without proper permission.

  39. 9.8CVE-2023-30699EPSS 0.7%

    Out-of-bounds write vulnerability in parser_hvcC function of libsimba library prior to SMR Aug-2023 Release 1 allows code execution by remote attackers.

  40. 5.5CVE-2023-30698EPSS 0.1%

    Improper access control vulnerability in TelephonyUI prior to SMR Aug-2023 Release 1 allows local attacker to connect BLE without privilege.

  41. 7.8CVE-2023-30697EPSS 0.2%

    An improper input validation in IpcTxCfgSetSimlockPayload in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.

  42. 7.8CVE-2023-30696EPSS 0.2%

    An improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.

  43. 7.8CVE-2023-30694EPSS 0.2%

    Out-of-bounds Write in IpcTxPcscTransmitApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.

  44. 7.8CVE-2023-30693EPSS 0.2%

    Out-of-bounds Write in DoOemFactorySendFactoryBypassCommand of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.

  45. 7.8CVE-2023-30691EPSS 0.2%

    Parcel mismatch in AuthenticationConfig prior to SMR Aug-2023 Release 1 allows local attacker to privilege escalation.

  46. 7.8CVE-2023-30689EPSS 0.2%

    Out-of-bounds Write in BuildOemEmbmsGetSigStrengthResponse of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.

  47. 7.8CVE-2023-30688EPSS 0.2%

    Out-of-bounds Write in MakeUiccAuthForOem of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.

  48. 7.8CVE-2023-30687EPSS 0.2%

    Out-of-bounds Write in RmtUimApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.

  49. 7.8CVE-2023-30686EPSS 0.2%

    Out-of-bounds Write in ReqDataRaw of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.

  50. 3.3CVE-2023-30685EPSS 0.2%

    Improper access control vulnerability in Telecom prior to SMR Aug-2023 Release 1 allows local attakcers to change TTY mode.