2596 matches found
CVE-2022-27824
Improper size check of in sapefdparsemetaDESCRIPTION function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file...
CVE-2022-27822
Information exposure vulnerability in ril property setting prior to SMR April-2022 Release 1 allows access to EFRUIMID value without permission...
CVE-2022-27822
CVE-2022-27822 describes an information-disclosure vulnerability in Samsung SMR (system patch package). Prior to SMR Apr-2022 Release 1, the ril property setting could expose EF_RUIMID without permission. Documented across multiple feeds (NVD entries and security notices) with affected product sc...
CVE-2022-27823
Improper size check in sapefdparsemetaHEADERold function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file...
CVE-2022-27823
CVE-2022-27823 affects Samsung SMR libsapeextractor: the sapefd_parse_meta_HEADER_old function may read out of bounds when processing a crafted media file. The issue is rooted in an improper size check, enabling out-of-bounds reads. Impact is described as partial confidentiality and partial avail...
CVE-2022-27821
CVE-2022-27821 concerns the Quram Agif library prior to Samsung SMR Apr-2022 Release 1, where an improper boundary check enables denial of service when processing a crafted image file. Multiple sources (Red Hat, NVD, CNVD, CVE listings) describe the issue consistently as a boundary-checking flaw ...
CVE-2022-27821
Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of service via crafted image file...
CVE-2022-27576
Information exposure vulnerability in Samsung DeX Home prior to SMR April-2022 Release 1 allows to access currently launched foreground app information without permission...
CVE-2022-27576
Samsung DeX Home Information Disclosure (CVE-2022-27576) affects Samsung DeX Home prior to the SMR April-2022 Release 1. Root cause: lack of proper access authentication logic that can reveal information about the currently launched foreground application. Impact: information exposure with access...
CVE-2022-27575
Information exposure vulnerability in One UI Home prior to SMR April-2022 Release 1 allows to access currently launched foreground app information without permission...
CVE-2022-27574
Improper input validation vulnerability in parseriloc and sheifdfinditemIndexin fuctions of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by privileged attacker...
CVE-2022-27574
CVE-2022-27574 affects the Samsung libsimba library prior to SMR Apr-2022 Release 1, caused by improper input validation in parser_iloc and sheifd_find_itemIndexin functions, enabling an out-of-bounds write by a privileged attacker. Documented impact indicators in NVD and Red Hat/CVE feeds descri...
CVE-2022-27572
Heap-based buffer overflow vulnerability in parseripma function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attackers...
CVE-2022-27571
Heap-based buffer overflow vulnerability in sheifdgetinfoimage function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker...
CVE-2022-27571
CVE-2022-27571 describes a heap-based buffer overflow in the function sheifd_get_info_image of the libsimba library, prior to the Samsung SMR Apr-2022 Release 1. This vulnerability could enable remote code execution without user interaction, with network access as the attack vector. The CVSS data...
CVE-2022-27570
Heap-based buffer overflow vulnerability in parsersingleiref function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker...
CVE-2022-27568
Heap-based buffer overflow vulnerability in parseriloc function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker...
CVE-2022-27568
CVE-2022-27568 describes a heap-based buffer overflow in the parser_iloc function of the libsimba library. The vulnerability allows a remote attacker to achieve code execution and arises in versions prior to Samsung SMR Apr-2022 Release 1. The issue is documented across multiple sources (NVD, Red...
CVE-2022-27567
This CVE (CVE-2022-27567) affects the libsimba library via a null pointer dereference in the parser_hvcC function, leading to an out-of-bounds write. The issue is triggered remotely by attackers and is tied to the libsimba code before SMR Apr-2022 Release 1. Several connected sources corroborate ...