2596 matches found
CVE-2023-21489
CVE-2023-21489 is a heap out-of-bounds write vulnerability in the bootloader of Samsung Mobile devices, prior to SMR May-2023 Release 1, allowing a physical attacker to execute arbitrary code. The issue affects the bootloader function/section used during device startup and is exploitable with phy...
CVE-2023-21500
The CVE-2023-21500 entry describes a double free validation issue in the mPOS TUI trustlet’s setPinPadImages function. Affected component: mPOS TUI trustlet prior to Samsung SMR May-2023 Release 1. Root cause: improper memory handling allows local attackers to access the trustlet memory. Impact i...
CVE-2023-21498
CVE-2023-21498 concerns Samsung’s mPOS TUI trustlet. The vulnerability is an improper input validation flaw in the function setPartnerTAInfo, which can allow a local attacker to overwrite trustlet memory. The issue is addressed in the SMR May-2023 Release 1 or later (per multiple sources in the c...
CVE-2023-21488
Improper access control vulnerablility in Tips prior to SMR May-2023 Release 1 allows local attackers to launch arbitrary activity in Tips...
CVE-2023-21493
Improper access control vulnerability in SemShareFileProvider prior to SMR May-2023 Release 1 allows local attackers to access protected data...
CVE-2023-21493
CVE-2023-21493 affects SemShareFileProvider prior to SMR May-2023 Release 1. The vulnerability is an improper access-control issue that enables local attackers to access protected data. Root cause is insufficient access restrictions on SemShareFileProvider components. Affected software is SemShar...
CVE-2023-21492
CVE-2023-21492 is a Samsung Mobile devices vulnerability where kernel pointers are printed to the log file, enabling a privileged, local attacker to bypass ASLR. Affected software relates to Samsung Mobile devices with the SMR May-2023 Release 1 context. The root cause is the insertion of sensiti...
PT-2023-18258 · Unknown · Shannon Baseband
Name of the Vulnerable Software and Affected Versions: Shannon baseband versions prior to SMR May-2023 Release 1 Description: The issue is related to a potential buffer overflow vulnerability in the mm LteInterRatManagement.c file. This vulnerability allows remote attackers to cause invalid memor...
CVE-2023-21495
CVE-2023-21495 concerns an improper access control bug in the Knox Enrollment Service on Samsung devices, prior to SMR May-2023 Release 1. The issue could allow an attacker to install a KSP app when device admin is set. Root cause: access control weakness in Knox Enrollment Service. Severity metr...
CVE-2023-21501
Improper input validation vulnerability in mPOS fiserve trustlet prior to SMR May-2023 Release 1 allows local attackers to execute arbitrary code...
CVE-2023-21502
Improper input validation vulnerability in FactoryTest application prior to SMR May-2023 Release 1 allows local attackers to get privilege escalation via debugging commands...
CVE-2023-21484
CVE-2023-21484 is an improper access control vulnerability in Samsung AppLock prior to the SMR May-2023 Release 1. The issue allows local attackers with low privileges to execute a privileged operation due to insufficient access checks. Affected component: AppLock (Samsung devices). Impact as des...
CVE-2023-21487
Improper access control vulnerability in Telephony framework prior to SMR May-2023 Release 1 allows local attackers to change a call setting...
CVE-2023-21497
Use of externally-controlled format string vulnerability in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the memory address...
CVE-2023-21456
Path traversal vulnerability in Galaxy Themes Service prior to SMR Mar-2023 Release 1 allows attacker to access arbitrary file with system uid...
CVE-2023-21458
Improper privilege management vulnerability in PhoneStatusBarPolicy in System UI prior to SMR Mar-2023 Release 1 allows attacker to turn off Do not disturb via unprotected intent...
CVE-2023-21461
Improper authorization vulnerability in AutoPowerOnOffConfirmDialog in Settings prior to SMR Mar-2023 Release 1 allows local attacker to turn device off via unprotected activity...
CVE-2023-21460
Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting...