CVE-2022-25832

CVE-2022-25832 concerns an improper authentication vulnerability in the Samsung S Secure component prior to SMR Apr-2022 Release 1, enabling physical attackers to access the locked Myfiles app without authentication. Affected product/variant: S Secure with Myfiles lock mechanism prior to the spec...

CVE-2022-25831

Improper access control vulnerability in S Secure prior to SMR Apr-2022 Release 1 allows physical attackers to access secured data in certain conditions...

PT-2022-17558 · S · S

Name of the Vulnerable Software and Affected Versions: S Secure versions prior to SMR Apr-2022 Release 1 Description: The issue is related to improper access control, allowing physical attackers to access secured data under certain conditions. Recommendations: For versions prior to SMR Apr-2022...

CVE-2022-24001

Information disclosure vulnerability in Edge Panel prior to Android S12 allows physical attackers to access screenshot in clipboard via Edge Panel...

Information disclosure

Information disclosure vulnerability in Edge Panel prior to Android S12 allows physical attackers to access screenshot in clipboard via Edge Panel...

CVE-2022-24001

Information disclosure vulnerability in Edge Panel prior to Android S12 allows physical attackers to access screenshot in clipboard via Edge Panel...

CVE-2022-24001

CVE-2022-24001 describes an information-disclosure flaw in the Android Edge Panel feature, prior to Android S(12). The vulnerability allows a physical attacker to access screenshots stored in the clipboard via Edge Panel. Documents consistently refer to the Edge Panel since the CVE description; n...

Microsoft Windows Lock Screen Improper Access Control Authentication Bypass Vulnerability

This vulnerability allows physically present attackers to bypass authentication on affected installations of Microsoft Windows. Authentication is not required to exploit this vulnerability. The specific flaw exists within the lock screen. The issue results from the lack of proper access control...

Improper access control

Improper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and 12.1.1.3 allows physically proximate attackers to log out user account on device without user password...

CVE-2020-13464

The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU or DMA module...

CVE-2020-13466

STMicroelectronics STM32F103 devices through 2020-05-20 allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration...

CVE-2020-13467

The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...

Design/Logic Flaw

Apex Microelectronics APM32F103 devices allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration...

Design/Logic Flaw

Gigadevice GD32F130 devices allow physical attackers to escalate their debug interface permissions via fault injection into inter-IC bonding wires which have insufficient physical protection...

CVE-2020-13470

CVE-2020-13470 affects Gigadevice GD32F103 and GD32F130 microcontrollers. The root cause is physical access enabling probing of bonding wires to de-obfuscate and extract data, with potential high integrity impact and no public remediation details in the provided documents. Monitor for vendor advi...

CVE-2020-13466

The CVE-2020-13466 entry concerns STMicroelectronics STM32F103 devices. The vulnerability is a local, physical-access issue where an attacker can trigger arbitrary code execution through a power glitch combined with a specific flash patch/breakpoint unit configuration. The description and linked ...

CVE-2020-13465

The security protection in Gigadevice GD32F103 devices allows physical attackers to redirect the control flow and execute arbitrary code via the debug interface...

CVE-2020-13464

CVE-2020-13464 affects China Key Systems & Integrated Circuit CKS32F103 devices. The vulnerability is in the flash memory readout protection, allowing a physical attacker to extract firmware through the debug interface by leveraging the CPU or DMA module. Impact stated in sources is firmware disc...

CVE-2020-13463

The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...

CVE-2019-15118

A flaw was found in the sound mixer handling of the Linux kernel. An attacker with physical access able to insert a specially crafted USB device can cause a recursive loop which continues to consume the reserved stack space leading to a system panic. The highest threat from this vulnerability is ...