EUVD-2023-35030

Malicious code in bioql PyPI...

EUVD-2024-34977

Malicious code in bioql PyPI...

EUVD-2023-35058

Malicious code in bioql PyPI...

EUVD-2023-35032

Malicious code in bioql PyPI...

EUVD-2024-18599

Malicious code in bioql PyPI...

EUVD-2023-25621

Malicious code in bioql PyPI...

EUVD-2024-34887

Malicious code in bioql PyPI...

EUVD-2023-46993

Malicious code in bioql PyPI...

EUVD-2022-52583

Malicious code in bioql PyPI...

EUVD-2023-35070

Malicious code in bioql PyPI...

EUVD-2023-35016

Malicious code in bioql PyPI...

EUVD-2022-28508

Malicious code in bioql PyPI...

CVE-2025-21043

Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code...

CVE-2025-21043

CVE-2025-21043 is an out-of-bounds write vulnerability in Samsung’s image decoding library, libimagecodec.quram.so, that can lead to remote code execution. The vulnerability affects Samsung mobile devices’ Quram DNG processing, with attacker-controlled input (e.g., malformed DNG) triggering heap/...

SAMSUNG SMR 安全漏洞

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung mobile applications. A security vulnerability exists in SAMSUNG SMR, which stems from the presence of an out-of-bounds write that could lead to the execution of arbitrary code...

CVE-2025-21026

Improper handling of insufficient permission in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to interrupt the call...

PT-2025-35901

Name of the Vulnerable Software and Affected Versions: MiscPolicy versions prior to SMR Nov-2022 Release 1 Description: An improper access control issue exists in the retrieveExternalProxy function. This allows a local attacker to access Proxy information. Recommendations: Update to SMR Nov-2022...

CVE-2025-21031

Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs...

CVE-2023-21478

Improper input validation vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data...

CVE-2023-21466

PendingIntent hijacking vulnerability in CertificatePolicy in framework prior to SMR Apr-2023 Release 1 allows local attackers to access contentProvider without proper permission...