CVE-2022-39888

Improper access control vulnerability in retrieveExternalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows local attacker to access to Proxy information...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Nov-2022 Release 1, which stems from improper access control and could...

PT-2022-25075 · Unknown · Libsmat.So

Name of the Vulnerable Software and Affected Versions: libsmat.so library versions prior to SMR Nov-2022 Release 1 Description: A heap overflow issue exists in the sflacf fal bytes peek function, allowing a local attacker to execute arbitrary code. Recommendations: For versions prior to SMR...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Nov-2022 Release 1 version, which stems from an improper authorization vulnerability in...

PT-2022-25077 · Unknown · Imsservice

Name of the Vulnerable Software and Affected Versions: IImsService versions prior to SMR Nov-2022 Release 1 Description: The issue is related to improper access control in IImsService, allowing a local attacker to access call information. Recommendations: For versions prior to SMR Nov-2022 Releas...

PT-2022-25079 · Ril · Ril

Name of the Vulnerable Software and Affected Versions: RIL versions prior to SMR Nov-2022 Release 1 Description: The issue is related to an improper access control vulnerability in the IpcRxServiceModeBigDataInfo component of RIL. This vulnerability allows a local attacker to access device...

PT-2022-25076 · Unknown · Storagemanagerservice

Name of the Vulnerable Software and Affected Versions: StorageManagerService versions prior to SMR Nov-2022 Release 1 Description: The issue is related to an improper authorization vulnerability. It allows a local attacker to call privileged API endpoints. Recommendations: For versions prior to S...