CVE-2021-38784: NULL Pointer Dereference

There is a NULL pointer dereference in the syscall openexec function of Allwinner R818 SoC Android Q SDK V1.0 that could executable a malicious file to cause a system crash...

PT-2022-10773

Name of the Vulnerable Software and Affected Versions Allwinner R818 SoC Android Q SDK V1.0 Description The issue is related to a NULL pointer dereference in the syscall open exec function. This could allow the execution of a malicious file, potentially causing a system crash. Recommendations For...

Information disclosure

A vulnerability using PendingIntent in Bixby Routines prior to version 3.1.21.8 in Android R11.0 and 2.6.30.5 in Android Q10.0 allows attackers to execute privileged action by hijacking and modifying the intent...

CVE-2022-22286

A vulnerability using PendingIntent in Bixby Routines prior to version 3.1.21.8 in Android R11.0 and 2.6.30.5 in Android Q10.0 allows attackers to execute privileged action by hijacking and modifying the intent...

PT-2022-15330

Name of the Vulnerable Software and Affected Versions Bixby Routines versions prior to 3.1.21.8 Description A vulnerability in Bixby Routines allows attackers to execute privileged actions by hijacking and modifying the intent using PendingIntent. This issue affects devices running Android R 11.0...

CVE-2021-25441

Improper input validation vulnerability in AR Emoji Editor prior to version 4.4.03.5 in Android Q10.0 and above allows untrusted applications to access arbitrary files with an escalated privilege...

Input validation

Improper input validation vulnerability in AR Emoji Editor prior to version 4.4.03.5 in Android Q10.0 and above allows untrusted applications to access arbitrary files with an escalated privilege...

CVE-2021-25441

Improper input validation vulnerability in AR Emoji Editor prior to version 4.4.03.5 in Android Q10.0 and above allows untrusted applications to access arbitrary files with an escalated privilege...

CVE-2021-25441

CVE-2021-25441 describes an improper input validation vulnerability in Samsung’s AR Emoji Editor. According to the sources, versions prior to 4.4.03.5 on Android Q (10.0) and newer are affected. The flaw permits untrusted applications to access arbitrary files with escalated privileges, indicatin...

CVE-2021-25441: Improper Input Validation

Improper input validation vulnerability in AR Emoji Editor prior to version 4.4.03.5 in Android Q10.0 and above allows untrusted applications to access arbitrary files with an escalated privilege...

PT-2021-16632

Name of the Vulnerable Software and Affected Versions: AR Emoji Editor versions prior to 4.4.03.5 Description: The issue is related to improper input validation, allowing untrusted applications to access arbitrary files with escalated privilege. This affects devices running Android Q 10.0 and...

CVE-2021-25403

Intent redirection vulnerability in Samsung Account prior to version 10.8.0.4 in Android P9.0 and below, and 12.2.0.9 in Android Q10.0 and above allows attacker to access contacts and file provider using SettingWebView component...

Information disclosure

Intent redirection vulnerability in Samsung Account prior to version 10.8.0.4 in Android P9.0 and below, and 12.2.0.9 in Android Q10.0 and above allows attacker to access contacts and file provider using SettingWebView component...

CVE-2021-25403

Intent redirection vulnerability in Samsung Account prior to version 10.8.0.4 in Android P9.0 and below, and 12.2.0.9 in Android Q10.0 and above allows attacker to access contacts and file provider using SettingWebView component...

CVE-2021-25403

Technical details are not publicly provided in the connected documents for CVE-2021-25403. Monitor official advisories and vendor updates for further information.

CVE-2021-25377

Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P9.0 below, and 12.2.0.5 in Android Q10.0 above allows attacker to execute privileged action...

CVE-2021-25381

Using unsafe PendingIntent in Samsung Account in versions 10.8.0.4 in Android P9.0 and below, and 12.1.1.3 in Android Q10.0 and above allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent...

Design/Logic Flaw

Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P9.0 below, and 12.2.0.5 in Android Q10.0 above allows attacker to execute privileged action...

Code injection

Using unsafe PendingIntent in Samsung Account in versions 10.8.0.4 in Android P9.0 and below, and 12.1.1.3 in Android Q10.0 and above allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent...

Spoofing

A pendingIntent hijacking vulnerability in Create Movie prior to SMR APR-2021 Release 1 in Android O8.x and P9.0, 3.4.81.1 in Android Q10,0, and 3.6.80.7 in Android R11.0 allows unprivileged applications to access contact information...