203 matches found
Design/Logic Flaw
Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service process crash...
CVE-2015-7895
Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service process crash...
Design/Logic Flaw
Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service process crash...
CVE-2015-7898
Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service process crash...
CVE-2015-7895
Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service process crash...
CVE-2015-7898
Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service process crash...
CVE-2015-7898
CVE-2015-7898 is a local-denial-of-service vulnerability in the Samsung Gallery app on the Samsung Galaxy S6, triggered when loading a GIF in the app (GIF parsing crash). Connected sources confirm the issue resides in Samsung Gallery’s image processing path and that an exploit existed (Samsung Ga...
CVE-2015-7895
CVE-2015-7895 affects the Samsung Gallery app on the Galaxy S6. The issue is a local-denial-of-service triggered by a bitmap decoding crash when opening an image with Gallery (bitmap processing path). Exploit-DB documents a DOS exploit for the Android platform using a crafted bitmap (bmp_memset.b...
Directory traversal
Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remote attackers to overwrite or create arbitrary files as the system-level user via a .. dot dot in the name of a file, compressed into a zipped file named cred.zip, and downloaded ...
CVE-2015-7888
Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remote attackers to overwrite or create arbitrary files as the system-level user via a .. dot dot in the name of a file, compressed into a zipped file named cred.zip, and downloaded ...
CVE-2015-7888
CVE-2015-7888 affects Samsung Galaxy S6 Edge WifiHs20UtilityService. A directory traversal occurs when a cred.zip is placed under /sdcard/Download; the unzipping process can write files to arbitrary locations (e.g., /data/bundle) as the system user due to unverified file paths. Project Zero notes...
CVE-2015-7888
Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remote attackers to overwrite or create arbitrary files as the system-level user via a .. dot dot in the name of a file, compressed into a zipped file named cred.zip, and downloaded ...
Samsung SM-G920F Information Disclosure Vulnerability
The Samsung SM-G920F Galaxy S6 is a smartphone from the South Korean company Samsung.SecEmailSync is one of the email synchronization plugins available. An information disclosure vulnerability exists in SecEmailSync in Samsung SM-G920F build G920FXXU2COH2. An attacker can exploit the vulnerabilit...
Security Bypass Vulnerability in Multiple Samsung Phones (CNVD-2017-07192)
Samsung SM-G920F Galaxy S6 and others are smartphones released by the South Korean company Samsung Samsung. A security bypass vulnerability exists in several Samsung phones. An attacker can exploit the vulnerability to modify Android settings with the help of AT access...
Security Bypass Vulnerability in Multiple Samsung Phones
Samsung SM-G920F Galaxy S6 and others are smartphones released by the South Korean company Samsung Samsung. A security bypass vulnerability exists in several Samsung phones. An attacker can use the vulnerability to make a call, send a text message or issue a command...
Samsung SM-G920F SecEmailSync SQL Injection Vulnerability
The Samsung SM-G920F Galaxy S6 is a smartphone from the South Korean company Samsung.SecEmailSync is one of the email synchronization plugins available. An SQL injection vulnerability exists in the SecEmailSync plugin in the Samsung SM-G920F build G920FXXU2COH2 version. A remote attacker can...
CVE-2016-2565
Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 Galaxy S6 devices allows attackers to read sent e-mail messages, aka SVE-2015-5081...
CVE-2016-4030
Samsung SM-G920F build G920FXXU2COH2 Galaxy S6, SM-N9005 build N9005XXUGBOK6 Galaxy Note 3, GT-I9192 build I9192XXUBNB1 Galaxy S4 mini, GT-I9195 build I9195XXUCOL1 Galaxy S4 mini LTE, and GT-I9505 build I9505XXUHOJ2 Galaxy S4 devices have unintended availability of the modem in USB configuration...
CVE-2016-2036
The getURL function in drivers/secfilter/urlparser.c in secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 Note 3 and SM-G920F build G920FXXU2COH2 Galaxy S6 devices allows attackers to trigger a NULL pointer dereference via a "GET HTTP/1.1" request, aka SVE-2016-5036...