CVE-2018-21064: Buffer Copy without Checking Size of Input

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. There is an array overflow in a driver's input booster. The Samsung ID is SVE-2017-11816 August 2018...

CVE-2018-21059: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. There is Clipboard content visibility in the locked state via the emergency contact picker. The Samsung ID is SVE-2018-11806 September 2018...

CVE-2018-21048: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered on Samsung mobile devices with O8.x software. There is a Notification leak on a locked device in Standalone Dex mode. The Samsung ID is SVE-2018-12925 November 2018...

CVE-2018-21046: Missing Authorization

An issue was discovered on Samsung mobile devices with O8.x software. There is clipboard Data Exposure via the Emergency Dialer upon connecting a USB device. The Samsung ID is SVE-2018-12911 November 2018...

CVE-2018-21047: Missing Authorization

An issue was discovered on Samsung mobile devices with O8.x software. There is a Factory Reset Protection FRP bypass via the voice assistant because Internet access begins before the Setup Wizard finishes. The Samsung ID is SVE-2018-12894 November 2018...

CVE-2018-21079: Missing Release of Memory after Effective Lifetime

An issue was discovered on Samsung mobile devices with L5.x, M6.0, N7.x, and O8.0 software. There is a kernel pointer leak in the USB gadget driver. The Samsung ID is SVE-2017-10993 March 2018...

CVE-2018-21042: Missing Authorization

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. Dual Messenger allows installation of an arbitrary APK with resultant privileged code execution. The Samsung ID is SVE-2018-13299 December 2018...

CVE-2020-11605: Insertion of Sensitive Information into Log File

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. There is sensitive information exposure from dumpstate in NFC logs. The Samsung ID is SVE-2019-16359 April 2020...

CVE-2020-7212

The encodeinvalidchars function in util/url.py in the urllib3 library 1.25.2 through 1.25.7 for Python allows a denial of service CPU consumption because of an inefficient algorithm. The percentencodings array contains all matches of percent encodings. It is not deduplicated. For a URL of length ...

Fedora: Security Advisory for squid (FEDORA-2020-790296a8f4)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-RU-2020:0793-1 Recommended update for systemd

This update for systemd fixes the following issues: - manager: fix job mode when signalled to shutdown etc bsc1161262 - remove fallback for user/exit.target - dbus method Manager.Exit does not start exit.target - do not install rescue.target for alt-↑ - %j/%J unit specifiers Added support for I/O...

CVE-2019-20625

An issue was discovered on Samsung mobile devices with N7.1 and O8.x Exynos chipsets software. The ion debugfs driver allows information disclosure. The Samsung ID is SVE-2018-13427 February 2019...

CVE-2019-20622

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos chipsets software. There is a baseband stack overflow. The Samsung ID is SVE-2018-13188 February 2019...

CVE-2019-20608

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. An attacker can use Emergency mode to disable features. The Samsung IDs are SVE-2018-13164, SVE-2018-13165 April 2019...

CVE-2019-20590

An issue was discovered on Samsung mobile devices with O8.x Qualcomm chipsets software. There is an integer underflow in the Secure Storage Trustlet. The Samsung ID is SVE-2019-13952 July 2019...

CVE-2019-20598

An issue was discovered on Samsung mobile devices with O8.x software. Bixby leaks the keyboard's learned words, and the clipboard contents, via the lock screen. The Samsung IDs are SVE-2018-12896, SVE-2018-12897 May 2019...

Double free

An issue was discovered on Samsung mobile devices with N7.X and O8.X Exynos 7570, 7870, 7880, 7885, 8890, 8895, and 9810 chipsets software. A double-fetch vulnerability in Trustlet allows arbitrary TEE code execution. The Samsung ID is SVE-2019-13910 April 2019...

Heap overflow

An issue was discovered on Samsung mobile devices with O8.1 and P9.0 Exynos chipsets software. A heap overflow exists in the bootloader. The Samsung ID is SVE-2019-14371 July 2019...

Heap overflow

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 MSM8996, MSM8998, Exynos7420, Exynos7870, Exynos8890, and Exynos8895 chipsets software. A heap overflow in the keymaster Trustlet allows attackers to write to TEE memory, and achieve arbitrary code execution. The Samsung ...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with O8.x software. Bixby leaks the keyboard's learned words, and the clipboard contents, via the lock screen. The Samsung IDs are SVE-2018-12896, SVE-2018-12897 May 2019...