Total
243 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2024-20803 | 1 Samsung | 1 Android | 2024-02-28 | N/A | 6.5 MEDIUM |
Improper authentication vulnerability in Bluetooth pairing process prior to SMR Jan-2024 Release 1 allows remote attackers to establish pairing process without user interaction. | |||||
CVE-2023-42570 | 1 Samsung | 1 Android | 2024-02-28 | N/A | 3.3 LOW |
Improper access control vulnerability in KnoxCustomManagerService prior to SMR Dec-2023 Release 1 allows attacker to access device SIM PIN. | |||||
CVE-2024-20812 | 1 Samsung | 1 Android | 2024-02-28 | N/A | 7.8 HIGH |
Out-of-bounds Write in padmd_vld_htbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code. | |||||
CVE-2023-42569 | 1 Samsung | 1 Android | 2024-02-28 | N/A | 3.3 LOW |
Improper authorization verification vulnerability in AR Emoji prior to SMR Dec-2023 Release 1 allows attackers to read sandbox data of AR Emoji. | |||||
CVE-2024-20806 | 1 Samsung | 1 Android | 2024-02-28 | N/A | 5.5 MEDIUM |
Improper access control in Notification service prior to SMR Jan-2024 Release 1 allows local attacker to access notification data. | |||||
CVE-2024-20813 | 1 Samsung | 1 Android | 2024-02-28 | N/A | 7.8 HIGH |
Out-of-bounds Write in padmd_vld_qtbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code. | |||||
CVE-2023-30731 | 1 Samsung | 1 Android | 2024-02-28 | N/A | 4.6 MEDIUM |
Logic error in package installation via debugger command prior to SMR Oct-2023 Release 1 allows physical attacker to install an application that has different build type. | |||||
CVE-2023-30718 | 1 Samsung | 1 Android | 2024-02-28 | N/A | 3.3 LOW |
Improper export of android application components vulnerability in WifiApAutoHotspotEnablingActivity prior to SMR Sep-2023 Release 1 allows local attacker to change a Auto Hotspot setting. | |||||
CVE-2023-30721 | 1 Samsung | 1 Android | 2024-02-28 | N/A | 4.4 MEDIUM |
Insertion of sensitive information into log vulnerability in Locksettings prior to SMR Sep-2023 Release 1 allows a privileged local attacker to get lock screen match information from the log. | |||||
CVE-2023-42533 | 1 Samsung | 1 Android | 2024-02-28 | N/A | 6.8 MEDIUM |
Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execute arbitrary code in Kernel. | |||||
CVE-2023-30732 | 1 Samsung | 1 Android | 2024-02-28 | N/A | 3.3 LOW |
Improper access control in system property prior to SMR Oct-2023 Release 1 allows local attacker to get CPU serial number. | |||||
CVE-2023-30688 | 1 Samsung | 1 Android | 2024-02-28 | N/A | 7.8 HIGH |
Out-of-bounds Write in MakeUiccAuthForOem of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code. | |||||
CVE-2023-42527 | 1 Samsung | 1 Android | 2024-02-28 | N/A | 5.5 MEDIUM |
Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to expose sensitive information. | |||||
CVE-2023-30727 | 1 Samsung | 1 Android | 2024-02-28 | N/A | 7.5 HIGH |
Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi and connect arbitrary Wi-Fi without User Interaction. | |||||
CVE-2023-30694 | 1 Samsung | 1 Android | 2024-02-28 | N/A | 7.8 HIGH |
Out-of-bounds Write in IpcTxPcscTransmitApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code. | |||||
CVE-2023-30713 | 1 Samsung | 1 Android | 2024-02-28 | N/A | 5.5 MEDIUM |
Improper privilege management vulnerability in FolderLockNotifier in One UI Home prior to SMR Sep-2023 Release 1 allows local attackers to change some settings of the folder lock. | |||||
CVE-2023-30679 | 1 Samsung | 1 Android | 2024-02-28 | N/A | 7.8 HIGH |
Improper access control in HDCP trustlet prior to SMR Aug-2023 Release 1 allows local attackers to execute arbitrary code. | |||||
CVE-2023-42545 | 1 Samsung | 2 Android, Phone | 2024-02-28 | N/A | 7.5 HIGH |
Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and 14.7.38 in Android 13 allows attackers to access location data. | |||||
CVE-2023-30697 | 1 Samsung | 1 Android | 2024-02-28 | N/A | 7.8 HIGH |
An improper input validation in IpcTxCfgSetSimlockPayload in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write. | |||||
CVE-2023-42535 | 1 Samsung | 1 Android | 2024-02-28 | N/A | 7.8 HIGH |
Out-of-bounds Write in read_block of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code. |