PT-2020-12354

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x software Samsung mobile devices with P9.0 software Samsung mobile devices with Q10.0 software Description An issue allows attackers to trigger an update to arbitrary touch-screen firmware on affected devices...

CVE-2019-20560: Out-of-bounds Write

An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. The BIOSUB Trustlet has an out of bounds write. The Samsung ID is SVE-2019-15261 October 2019...

CVE-2019-20585: Access of Resource Using Incompatible Type

An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. There is type confusion in the SECFR Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14851 August 2019...

CVE-2019-20583: Access of Resource Using Incompatible Type

An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. There is type confusion in the EXTFR Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14847 August 2019...

CVE-2019-20623: Use of Uninitialized Resource

An issue was discovered on Samsung mobile devices with N7.1, O8.x, and P9.0 software. Gallery has uninitialized memory disclosure. The Samsung ID is SVE-2018-13060 February 2019...

CVE-2019-20565: Improper Authentication

An issue was discovered on Samsung mobile devices with O8.x and P9.0 software. Attackers can change the USB configuration without authentication. The Samsung ID is SVE-2018-13300 September 2019...

CVE-2019-20558: Buffer Copy without Checking Size of Input

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos chipsets software. There is a Buffer Overflow in the Touch Screen Driver. The Samsung ID is SVE-2019-14990 October 2019...

PT-2020-10548

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x with TEEGRIS software Description The issue is related to type confusion in the WVDRM Trustlet, which can lead to arbitrary code execution. Recommendations For Samsung mobile devices with O8.x with TEEGRIS...

CVE-2019-20532: Missing Authentication for Critical Function

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. Attackers can access the Developer options without authentication. The Samsung ID is SVE-2019-15800 December 2019...

CVE-2020-10844: Out-of-bounds Read

An issue was discovered on Samsung mobile devices with O8.x, P9.x, and Q10.0 software. There is an out-of-bounds read vulnerability in media.audiopolicy. The Samsung ID is SVE-2019-16333 February 2020...

CVE-2019-20604: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with O8.x software. Attackers can disable Gallery permanently. The Samsung ID is SVE-2019-14031 May 2019...

PT-2020-10580

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x software Description An issue was discovered that allows attackers to disable the Gallery permanently on affected devices. Recommendations For Samsung mobile devices with O8.x software, at the moment, there is ...

PT-2020-12377

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x software Samsung mobile devices with P9.0 software Samsung mobile devices with Q10.0 software Description An issue was discovered where kernel stack addresses are leaked to userspace. Recommendations For Samsun...

PT-2020-10545

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x and P9.0 devices Exynos and Qualcomm chipsets software Description A race condition causes a Use-After-Free issue. This issue affects Samsung mobile devices with O8.x and P9.0 devices, including both Exynos and...

PT-2020-10526

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x software Description An issue was discovered where the S Secure app can access the content of a locked app without a password. Recommendations For Samsung mobile devices with O8.x software, at the moment, there...

CVE-2019-20584: Access of Resource Using Incompatible Type

An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. There is type confusion in the HDCP Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14850 August 2019...

CVE-2019-20615: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. Attackers can bypass Factory Reset Protection FRP via SVoice T&C. The Samsung ID is SVE-2018-13547 March 2019...

CVE-2019-5186

An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. An attacker can send a specially crafted packet to trigger the parsing of this cache file.At 0x1eb9c the extracted interface element name from the xml file is...

Stack overflow

An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. An attacker can send a specially crafted packet to trigger the parsing of this cache file. At 0x1ea28 the extracted state value from the xml file is used as a...

Double free

An exploitable double free vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. A specially crafted XML cache file written to a specific location on the device can cause a heap pointer to be freed twice, resulting in a denial of service and potentially code...