Null pointer dereference

Null pointer dereference vulnerability in parserinfe function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds read by remote attackers...

Information disclosure

Information exposure vulnerability in ril property setting prior to SMR April-2022 Release 1 allows access to EFRUIMID value without permission...

CVE-2022-27836

Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1 allow local attackers to access arbitrary system files without a proper permission. The patch adds proper validation logic to prevent arbitrary files access...

CVE-2022-27835

CVE-2022-27835 describes an improper boundary check in Samsung SMR UWB firmware prior to Apr-2022 Release 1, enabling arbitrary memory write. Affected component: UWB firmware used in Samsung SMR patch package; root cause: insufficient boundary validation in the firmware. Impact stated: potential ...

CVE-2022-27834

Use after free vulnerability in dspcontextunloadgraph function of DSP driver prior to SMR Apr-2022 Release 1 allows attackers to perform malicious actions...

CVE-2022-27834

CVE-2022-27834: Use-after-free in the DSP driver’s dsp_context_unload_graph function (pre-SMR Apr-2022 Release 1). Affects the DSP driver; attackers could cause malicious actions. Root cause: use-after-free in the affected function. CVSS details show high impact under CVSS 3.1 (LOCAL, HIGH impact...

CVE-2022-27833

Improper input validation in DSP driver prior to SMR Apr-2022 Release 1 allows out-of-bounds write by integer overflow...

CVE-2022-27832

Improper boundary check in media.extractor library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of service via a crafted media file...

CVE-2022-27831

Improper boundary check in sflvdrdbufbits of libsflvextractor prior to SMR Apr-2022 Release 1 allows attackers to read out of bounds memory...

CVE-2022-27830

Improper validation vulnerability in SemBlurInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities...

CVE-2022-27830

CVE-2022-27830 describes an improper validation vulnerability in the SemBlurInfo component prior to Samsung SMR Apr-2022 Release 1, enabling attackers with local access to launch certain activities. The NVD entry lists a High risk (CVSS v3.1: 7.8) with LOCAL access, LOW attack complexity, and no ...

CVE-2022-27829

Improper validation vulnerability in VerifyCredentialResponse prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities...

CVE-2022-27829

CVE-2022-27829 is described across multiple connected sources as an improper validation vulnerability in Samsung SMR’s VerifyCredentialResponse prior to SMR Apr-2022 Release 1. The issue enables attackers to launch certain activities, with affected entities typically within the device’s local tru...

CVE-2022-27828

CVE-2022-27828 involves Samsung MediaMonitorEvent with an improper input/validation check prior to SMR Apr-2022 Release 1. The vulnerability is rated HIGH (CVSSv3.1: Local, Low attack complexity, Privileges Required: Low, No user interaction; confidentiality, integrity, and availability all high)...

CVE-2022-27828

Improper validation vulnerability in MediaMonitorEvent prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities...

CVE-2022-27827

Improper validation vulnerability in MediaMonitorDimension prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities...

CVE-2022-27826

Technical details about CVE-2022-27826 are not publicly provided in the connected documents; monitor for updates.

CVE-2022-27827

The CVE-2022-27827 entry concerns an improper validation vulnerability in MediaMonitorDimension, prior to Samsung SMR Apr-2022 Release 1. Affected item appears to be the MediaMonitorDimension component (in Samsung context) where input validation fails, enabling attackers to launch certain activit...

CVE-2022-27826

Improper validation vulnerability in SemSuspendDialogInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities...

CVE-2022-27825

The CVE-2022-27825 vulnerability affects the libsapeextractor library, specifically the sapefd_parse_meta_HEADER function. A faulty size check can allow an out-of-bounds read when processing a crafted media file. This issue is addressed in Samsung SMR Apr-2022 Release 1 (patch package), mitigatin...