563 matches found
Code injection
OOB read vulnerability in libsaviextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to access arbitrary address through pointer via forged avi file...
Null pointer dereference
NULL pointer dereference vulnerability in NPU driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption...
Null pointer dereference
NULL pointer dereference vulnerability in ION driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption...
Code injection
OOB read vulnerability in libswmfextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute memcpy at arbitrary address via forged wmf file...
Input validation
An improper input validation vulnerability in loading graph file in DSP driver prior to SMR Sep-2021 Release 1 allows attackers to perform permanent denial of service on the device...
Input validation
An improper input validation vulnerability in libsapeextractor library prior to SMR Sep-2021 Release 1 allows attackers to execute arbitrary code in mediaextractor process...
CVE-2021-25462
NULL pointer dereference vulnerability in NPU driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption...
CVE-2021-25462
CVE-2021-25462 describes a NULL pointer dereference in Samsung NPU driver prior to SMR Sep-2021 Release 1, leading to memory corruption. The vulnerability is local (attack vector: LOCAL) with low attack complexity per CVSS v3.1, and impacts memory integrity/availability as specified. Affected com...
CVE-2021-25460
An improper access control vulnerability in sspExit in BlockchainTZService prior to SMR Sep-2021 Release 1 allows attackers to terminate BlockchainTZService...
CVE-2021-25460
CVE-2021-25460 affects BlockchainTZService, where an improper access control in the sspExit() function could allow an attacker to terminate the service. The issue is limited to BlockchainTZService prior to SMR Sep-2021 Release 1. Impact is service termination (availability). Remediation: upgrade ...
CVE-2021-25459
CVE-2021-25459 affects BlockchainTZService. The vulnerability is an improper access control in the sspInit() function that allows attackers to start the BlockchainTZService. Affected versions are prior to SMR Sep-2021 Release 1. Exploitation details are not provided beyond local access vectors im...
CVE-2021-25459
An improper access control vulnerability in sspInit in BlockchainTZService prior to SMR Sep-2021 Release 1 allows attackers to start BlockchainTZService...
CVE-2021-25458
NULL pointer dereference vulnerability in ION driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption...
CVE-2021-25458
CVE-2021-25458 describes a NULL pointer dereference in the ION driver prior to Samsung SMR Sep-2021 Release 1, leading to memory corruption. Affected component: ION driver; root cause relates to a NULL pointer dereference. Impact (per sources): local attacker could trigger memory corruption with ...
CVE-2021-25457
The CVE-2021-25457 report concerns a vulnerability in Samsung’s DSP driver prior to the SMR September 2021 Release 1. The issue is an improper input validation that allows a local attacker to obtain a limited amount of kernel memory information, affecting kernel memory confidentiality. Affected c...
CVE-2021-25456
OOB read vulnerability in libswmfextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute memcpy at arbitrary address via forged wmf file...
CVE-2021-25456
CVE-2021-25456 affects the libswmfextractor.so component. The vulnerability is described as an out-of-bounds read that enables an attacker to cause a memcpy at an arbitrary address via a forged WMF file, implying memory corruption with possible in-memory impact. According to the sources, this is ...
CVE-2021-25455
Summary: CVE-2021-25455 is an OOB read vulnerability in the libsaviextractor.so library, reported to affect the pre-SMR Sep-2021 Release 1. The available descriptions state that an attacker could access an arbitrary memory address via a forged AVI file, via a crafted input, with a local attack ve...