83 matches found
CVE-2024-49404
Improper Access Control in Samsung Video Player prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.3.41.230 in Android 14 allows physical attackers to access video file of other users...
CVE-2024-49404
The CVE-2024-49404 entry concerns Samsung Video Player with an improper access control flaw that could allow a physical attacker to access other users’ video files. Affected versions are: Android 12 where versions prior to 7.3.29.1 are vulnerable; Android 13 prior to 7.3.36.1; and Android 14 prio...
CVE-2024-49404
Improper Access Control in Samsung Video Player prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.3.41.230 in Android 14 allows physical attackers to access video file of other users...
PT-2024-33515 · Google +1 · Android 12 +3
Name of the Vulnerable Software and Affected Versions: Samsung Video Player versions prior to 7.3.29.1 on Android 12 Samsung Video Player versions prior to 7.3.36.1 on Android 13 Samsung Video Player versions prior to 7.3.41.230 on Android 14 Description: The issue is related to improper access...
CVE-2024-34672
Improper input validation in SamsungVideoPlayer prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.3.41.230 in Android 14 allows local attackers to access video file of other users...
CVE-2024-34672
Improper input validation in SamsungVideoPlayer prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.3.41.230 in Android 14 allows local attackers to access video file of other users...
CVE-2024-34662
Improper access control in ActivityManager prior to SMR Oct-2024 Release 1 in select Android 12, 13 and SMR Sep-2024 Release 1 in select Android 14 allows local attackers to execute privileged behaviors...
CVE-2024-34672
SamsungVideoPlayer is affected by improper input validation prior to versions 7.3.29.1 (Android 12), 7.3.36.1 (Android 13), and 7.3.41.230 (Android 14). This flaw allows local attackers to access video files of other users. The Red Hat and other sources reflect the same description. Practical imp...
CVE-2024-34672
Improper input validation in SamsungVideoPlayer prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.3.41.230 in Android 14 allows local attackers to access video file of other users...
CVE-2024-34672
Improper input validation in SamsungVideoPlayer prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.3.41.230 in Android 14 allows local attackers to access video file of other users...
CVE-2024-34662
CVE-2024-34662 involves improper access control in Android’s ActivityManager. The issue affects select Android 12 and 13 earlier than SMR Oct-2024 Release 1, and select Android 14 earlier than SMR Sep-2024 Release 1, enabling local attackers to perform privileged actions. Mitigation is via update...
CVE-2024-34662
Improper access control in ActivityManager prior to SMR Oct-2024 Release 1 in select Android 12, 13 and SMR Sep-2024 Release 1 in select Android 14 allows local attackers to execute privileged behaviors...
Google Adds New Pixel Security Features to Block 2G Exploits and Baseband Attacks
Google has revealed the various security guardrails that have been incorporated into its latest Pixel devices to counter the rising threat posed by baseband security attacks. The cellular baseband i.e., modem refers to a processor on the device that's responsible for handling all connectivity, su...
ASB-A-327748846
In shouldSkipForInitialSUW of AdvancedPowerUsageDetail.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2024-34637
Improper access control in WindowManagerService prior to SMR Sep-2024 Release 1 in Android 12, and SMR Jun-2024 Release 1 in Android 13 and Android 14 allows local attackers to bypass restrictions on starting services from the background...
CVE-2024-34637
CVE-2024-34637 affects WindowManagerService in certain Android releases (Android 12 SMR Sep-2024 Release 1; Android 13/14 SMR Jun/Sep 2024 releases). The vulnerability is an improper access control that allows local attackers to bypass restrictions on starting services from the background. Connec...
CVE-2024-34637
Improper access control in WindowManagerService prior to SMR Sep-2024 Release 1 in Android 12, and SMR Jun-2024 Release 1 in Android 13 and Android 14 allows local attackers to bypass restrictions on starting services from the background...
Exploit for Special Element Injection in Google Android
!python-static-badgehttps://img.shields.io/badge/Python-blue?...
CVE-2024-34599
The vulnerability CVE-2024-34599 involves Samsung Tips on Android 14, where improper input validation in Tips prior to version 6.2.9.4 allows a local attacker to send broadcasts with Tips’ privilege. Affected component: Tips (Android 14) before 6.2.9.4. Root cause: improper input validation. Impa...