2594 matches found
CVE-2021-25472
The CVE-2021-25472 entry concerns an improper access control vulnerability in BluetoothSettingsProvider for Samsung SMR releases. Affected component: BluetoothSettingsProvider prior to SMR Oct-2021 Release 1. Condition: an untrusted application can overwrite certain Bluetooth information due to w...
CVE-2021-25471
The vulnerability CVE-2021-25471 affects Samsung devices in the Security Mode Command (SMC) processing path where replay protection is missing. This lack of replay attack protection can cause denial of service to mobile network connections and result in battery depletion. Documented impact is tie...
CVE-2021-25470
An improper caller check logic of SMC call in TEEGRIS secure OS prior to SMR Oct-2021 Release 1 can be used to compromise TEE...
CVE-2021-25470
CVE-2021-25470 affects TEEGRIS Secure OS prior to SMR Oct‑2021 Release 1. The issue is an improper caller check logic in the SMC call that can be used to compromise the Trusted Execution Environment (TEE). Impact is described as TEE compromise; no exploit details provided in the documents. Mitiga...
CVE-2021-25469
A possible stack-based buffer overflow vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows arbitrary code execution...
CVE-2021-25468
CVE-2021-25468 concerns a memory-access vulnerability in Samsung Widevine Trustlet. Multiple sources indicate that Widevine trustlet versions prior to SMR Oct-2021 Release 1 are affected and that an attacker with local access could read arbitrary memory addresses due to a boundary/memory check is...
CVE-2021-25467
CVE-2021-25467 describes a potential buffer overflow in the Vision DSP kernel driver (Samsung devices) before SMR Oct-2021 Release 1, enabling privilege escalation to root via hijacking a loaded library. The incident is tied to local exploit scenarios, with impact described as high for confidenti...
CVE-2021-25489
Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
Samsung SMR 格式化字符串错误漏洞
SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung cell phone applications. A Format String Error vulnerability exists in versions prior to Samsung SMR Oct-2021 Release 1. The vulnerability stems from a lack of input validation in...
CVE-2021-25487
Lack of boundary checking of a buffer in setskbpriv of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed...
Samsung SMR 代码问题漏洞
Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in versions prior to Samsung SMR Oct-2021 Release 1, which originates from a mishandling of the Exynos CP boot driver and allows local attackers to...
CVE-2021-25462
NULL pointer dereference vulnerability in NPU driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption...
CVE-2021-25461
An improper length check in APAService prior to SMR Sep-2021 Release 1 results in stack based Buffer Overflow...
CVE-2021-25461
An improper length check in APAService prior to SMR Sep-2021 Release 1 results in stack based Buffer Overflow...
CVE-2021-25462
NULL pointer dereference vulnerability in NPU driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption...
CVE-2021-25453
Some improper access control in Bluetooth APIs prior to SMR Sep-2021 Release 1 allows untrusted application to get Bluetooth information...
CVE-2021-25455
OOB read vulnerability in libsaviextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to access arbitrary address through pointer via forged avi file...
CVE-2021-25457
An improper input validation vulnerability in DSP driver prior to SMR Sep-2021 Release 1 allows local attackers to get a limited kernel memory information...