Stack overflow

An issue was discovered on Samsung mobile devices with JBP4.2 and KK4.4 Marvell chipsets software. The ACIPC-MSOCKET driver allows local privilege escalation via a stack-based buffer overflow. The Samsung ID is SVE-2016-5393 April 2016...

Memory corruption

An issue was discovered on Samsung mobile devices with L5.0/5.1 software. The Gallery library allow memory corruption via a malformed image. The Samsung ID is SVE-2016-5317 May 2016...

CVE-2016-11039

An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, and M6.0 AP + CP MDM9x35, or Qualcomm Onechip software. There is a NULL pointer dereference issue in the IPC socket code. The Samsung ID is SVE-2016-5980 July 2016...

CVE-2016-11039

CVE-2016-11039 affects Samsung mobile devices running KK/4.4, L/5.0–5.1, and M/6.0 (AP + CP MDM9x35 or Qualcomm Onechip). The issue is a NULL pointer dereference in the IPC socket code, as described by multiple sources (e.g., Red Hat and NVD records). Impact is indicated as HIGH with potential av...

CVE-2016-11040

Technical details for CVE-2016-11040 are not publicly provided in the supplied documents. Monitor for updates and future disclosures.

CVE-2016-11041

The CVE-2016-11041 issue affects Samsung mobile devices on KK (Android 4.4). Affected component: the lockscreen handling; root cause: attackers can bypass the lockscreen by sending an AT command over USB. This vulnerability is documented across multiple sources (Red Hat, NVD, CVE List) with consi...

CVE-2016-11042

CVE-2016-11042 affects Samsung mobile devices running L (5.0/5.1) and M (6.0), describing a SIM lock bypass. The connected documents reiterate only that a SIM lock bypass exists (SVE-2016-5381) but do not provide technical details about the affected component, root cause, exploitability, or concr...

CVE-2016-11042

An issue was discovered on Samsung mobile devices with L5.0/5.1 and M6.0 software. There is a SIM Lock bypass. The Samsung ID is SVE-2016-5381 June 2016...

CVE-2016-11043

Affected product: Samsung mobile devices running M(6.0) software. Issue: S/MIME in EAS uses DES instead of the intended 3DES, enabling weaker cryptographic protection. Documented as Samsung ID SVE-2016-5871 (June 2016). Impact per sources: design weakness in encryption; CVSS notes indicate higher...

CVE-2016-11043

An issue was discovered on Samsung mobile devices with M6.0 software. The S/MIME implementation in EAS uses DES where 3DES is intended. The Samsung ID is SVE-2016-5871 June 2016...

CVE-2016-11044

The vulnerability CVE-2016-11044 affects Samsung mobile devices running Lollipop (5.0/5.1) and Marshmallow (6.0) with fingerprint support. It enables bypass of the application signature check during installation, as documented under Samsung’s SVE-2016-5923. Evidence across sources (NVD, Red Hat, ...

CVE-2016-11045

The CVE-2016-11045 entry relates to Samsung mobile devices running Lollipop (5.0/5.1) where the Gallery library is vulnerable to memory corruption triggered by a malformed image. Documented impact indicates potential data/process integrity concerns within the Gallery component. The issue is assoc...

CVE-2016-11045

An issue was discovered on Samsung mobile devices with L5.0/5.1 software. The Gallery library allow memory corruption via a malformed image. The Samsung ID is SVE-2016-5317 May 2016...

CVE-2016-11046

The CVE-2016-11046 issue affects Samsung mobile devices running JBP (4.3), KK (4.4), and L (5.0/5.1) where a misused whitelist allows access to the Radio Interface Layer (RIL/RILD) enabling calls or SMS. Affected component is the RIL path; root cause is the whitelist mishandling, as described in ...

CVE-2016-11046

An issue was discovered on Samsung mobile devices with JBP4.3, KK4.4, and L5.0/5.1 software. Because of a misused whitelist, attackers can reach the radio layer aka RIL or RILD to place calls or send SMS messages. The Samsung ID is SVE-2016-5733 May 2016...

CVE-2016-11047

Samsung mobile devices with JBP(4.2) and KK(4.4) on Marvell chipsets are affected by CVE-2016-11047 due to a stack-based buffer overflow in the ACIPC-MSOCKET driver, enabling local privilege escalation. Root cause: vulnerable ACIPC-MSOCKET component; impact: local privilege elevation as described...

CVE-2016-11048

Technical details for CVE-2016-11048 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-11049

CVE-2016-11049 affects Samsung mobile devices with software up to 2016-01-16 on Shannon333/308/310 chipsets. The vulnerability arises from an error in managing key information, enabling retrieval and modification of IMEI. The issue is documented across multiple sources (NVD, Red Hat, CNVD, CVE re...

CVE-2016-11049

An issue was discovered on Samsung mobile devices with software through 2016-01-16 Shannon333/308/310 chipsets. The IMEI may be retrieved and modified because of an error in managing key information. The Samsung ID is SVE-2016-5435 March 2016...

CVE-2016-11050

CVE-2016-11050 affects Samsung mobile devices (S3(KK), Note2(KK), S4(L), Note3(L), S5(L)). An attacker can rewrite the IMEI by flashing crafted firmware, per the description in the CVE entry and Red Hat/NVD references. The vulnerability focuses on the firmware flashing process enabling IMEI modif...