2594 matches found
CVE-2025-21031
Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs...
CVE-2023-21478
Improper input validation vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data...
CVE-2023-21466
PendingIntent hijacking vulnerability in CertificatePolicy in framework prior to SMR Apr-2023 Release 1 allows local attackers to access contentProvider without proper permission...
CVE-2025-21034
Out-of-bounds write in libsavsvc.so prior to SMR Sep-2025 Release 1 allows local attackers to potentially execute arbitrary code...
CVE-2023-21478
CVE-2023-21478 affects the TIGERF trustlet prior to SMR Apr-2023 Release 1. The vulnerability is due to improper input validation and could allow local attackers to access protected data. Affected component is the TIGERF trustlet; impact is exposure of data to a local attacker. Public exploit det...
CVE-2023-21475
Out-of-bounds Write vulnerability in libaudiosaplussec.so library prior to SMR Apr-2023 Release 1 allows local attacker to execute arbitrary code...
CVE-2023-21467
CVE-2023-21467 is a vulnerability in the Exynos baseband’s 3GPP specification implementation, prior to Samsung SMR Apr-2023 Release 1, causing incorrect handling of unencrypted messages. Public details show it affects Exynos baseband code and is rated high impact (CVSSv3.1: Critical on NVD with N...
PT-2025-35660
Name of the Vulnerable Software and Affected Versions: Exynos baseband versions prior to SMR Apr-2023 Release 1 Description: An error in the 3GPP specification implementation within the Exynos baseband allows for incorrect handling of unencrypted messages. Recommendations: Update to SMR Apr-2023...
PT-2025-35668
Name of the Vulnerable Software and Affected Versions: libaudiosaplus sec.so versions prior to SMR Apr-2023 Release 1 Description: An out-of-bounds write issue exists in the libaudiosaplus sec.so library. This can allow a local attacker to execute arbitrary code. Recommendations: Update...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Apr-2022 Release 1, which stems from improper access control and could...
CVE-2025-21015
Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to delete file with Document scanner's privilege...
CVE-2025-20990
Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to access device identifier...
CVE-2025-20990
Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to access device identifier...
CVE-2025-20999
Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025 Release 1 allows secondary users to access owner's saved Wi-Fi password...
CVE-2025-20992
Out-of-bound read in libsecimaging.camera.samsung.so prior to SMR Feb-2025 Release 1 allows local attackers to read out-of-bounds memory...
CVE-2025-20981
Improper access control in AudioService prior to SMR Jun-2025 Release 1 allows local attackers to access sensitive information...
CVE-2025-20992
Out-of-bound read in libsecimaging.camera.samsung.so prior to SMR Feb-2025 Release 1 allows local attackers to read out-of-bounds memory...
CVE-2025-20988
Out-of-bounds read in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to read out-of-bounds memory...
CVE-2025-20987
The CVE-2025-20987 issue is tied to fingerprint trustlet on Samsung devices, where improper access control allows local privileged attackers to obtain an auth_token. According to PT-2025-23749 (Fingerprint trustlet) and related sources, affected versions are before SMR May-2025 Release 1. The roo...