CVE-2024-20895

Improper access control in Dar service prior to SMR Jul-2024 Release 1 allows local attackers to bypass restriction for calling SDP features...

CVE-2024-20894

CVE-2024-20894 affects Samsung Secure Folder on devices with firmware before SMR Jul-2024 Release 1. It stems from improper handling of exceptional conditions, enabling a physical attacker to bypass authentication under certain conditions, with user interaction required to trigger. Affected due t...

CVE-2024-20894

Improper handling of exceptional conditions in Secure Folder prior to SMR Jul-2024 Release 1 allows physical attackers to bypass authentication under certain condition. User interaction is required for triggering this vulnerability...

CVE-2024-20893

CVE-2024-20893 describes improper input validation in libmediaextractorservice.so prior to the Samsung SMR Jul-2024 Release 1, enabling local attackers to trigger memory corruption. Public sources consistently reference Samsung Mobile devices as affected; documentation from Red Hat and NVD corrob...

CVE-2024-20893

Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows local attackers to trigger memory corruption...

CVE-2024-20893

Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows local attackers to trigger memory corruption...

CVE-2024-20892

CVE-2024-20892 concerns Samsung Mobile devices and targets the FilterProvider component. The public reports state an improper verification of the signature in FilterProvider prior to SMR Jul-2024 Release 1, enabling a local attacker to trigger privileged behaviors. The exploit requires user inter...

CVE-2024-20892

Improper verification of signature in FilterProvider prior to SMR Jul-2024 Release 1 allows local attackers to execute privileged behaviors. User interaction is required for triggering this vulnerability...

CVE-2024-20891

Improper access control in launchFullscreenIntent of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities...

CVE-2024-20891

Improper access control in launchFullscreenIntent of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities...

CVE-2024-20890

Improper input validation in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to trigger abnormal behavior...

CVE-2024-20890

The CVE-2024-20890 entry concerns Samsung Mobile BLE prior to SMR Jul-2024 Release 1, where improper input validation in BLE can allow adjacent attackers to trigger abnormal behavior. Connected sources confirm the affected context is Samsung Mobile devices with BLE functioning, and the root cause...

CVE-2024-20890

Improper input validation in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to trigger abnormal behavior...

CVE-2024-20889

The CVE-2024-20889 entry concerns Samsung Mobile devices (BLE) with improper authentication prior to SMR Jul-2024 Release 1, allowing adjacent attackers to pair with devices. Root cause: BLE pairing lacks proper authentication in affected builds. Impact: adjacent, unauthenticated pairing could en...

CVE-2024-20888

CVE-2024-20888 : Improper access control in Samsung OneUIHome prior to SMR Jul-2024 Release 1 enables local attackers to launch privileged activities. Impact: high confidentiality, integrity, and availability concerns; attack vector is local with user interaction required. Affected software: OneU...

PT-2024-18807 · Samsung · Secure Folder

Name of the Vulnerable Software and Affected Versions: Secure Folder versions prior to SMR Jul-2024 Release 1 Description: The issue arises from improper handling of exceptional conditions, allowing physical attackers to bypass authentication under certain conditions. User interaction is required...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile devices prior to SMR Jul-2024 Release 1, which stems from improper input validation of the parsing RTCP RR...

PT-2024-18811 · Unknown · Softphoneclient

Name of the Vulnerable Software and Affected Versions: SoftphoneClient in IMS service versions prior to SMR Jul-2024 Release 1 Description: The issue allows local attackers to obtain sensitive information due to the use of implicit intent for sensitive communication in the SoftphoneClient...

PT-2024-18800 · Samsung · One Ui Home

Name of the Vulnerable Software and Affected Versions: OneUIHome versions prior to SMR Jul-2024 Release 1 Description: The issue is related to improper access control, allowing local attackers to launch privileged activities. User interaction is required to trigger this issue. Recommendations: Fo...

PT-2024-18810 · Ims · Ims

Name of the Vulnerable Software and Affected Versions: FCM function in IMS service versions prior to SMR Jul-2024 Release 1 Description: The issue concerns the use of implicit intent for sensitive communication in the FCM function within the IMS service, allowing local attackers to obtain sensiti...