2596 matches found
CVE-2024-20866
Authentication bypass vulnerability in Setupwizard prior to SMR May-2024 Release 1 allows physical attackers to skip activation step...
CVE-2024-20862
Out-of-bounds write in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code...
CVE-2024-20865
Authentication bypass in bootloader prior to SMR May-2024 Release 1 allows physical attackers to flash arbitrary images...
CVE-2024-20860
Improper export of android application components vulnerability in TelephonyUI prior to SMR May-2024 Release 1 allows local attackers to reboot the device without proper permission...
CVE-2024-20861
Use after free vulnerability in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to cause memory corruption...
CVE-2024-20856
Improper Authentication vulnerability in Secure Folder prior to SMR May-2024 Release 1 allows physical attackers to access Secure Folder without proper authentication in a specific scenario...
CVE-2024-20858
Improper access control vulnerability in setCocktailHostCallbacks of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to access information of current application...
CVE-2024-20860
Improper export of android application components vulnerability in TelephonyUI prior to SMR May-2024 Release 1 allows local attackers to reboot the device without proper permission...
CVE-2024-20855
Improper access control vulnerability in multitasking framework prior to SMR May-2024 Release 1 allows physical attackers to access unlocked screen for a while...
CVE-2024-20855
Improper access control vulnerability in multitasking framework prior to SMR May-2024 Release 1 allows physical attackers to access unlocked screen for a while...
CVE-2024-20855
Improper access control vulnerability in multitasking framework prior to SMR May-2024 Release 1 allows physical attackers to access unlocked screen for a while...
CVE-2024-20855
The vulnerability CVE-2024-20855 affects the multitasking framework (Samsung Mobile devices) with improper access control. Versions prior to SMR May-2024 Release 1 allow physical attackers to access an unlocked screen for a period of time. Remediation: update to SMR May-2024 Release 1 or later. N...
CVE-2024-20866
Authentication bypass vulnerability in Setupwizard prior to SMR May-2024 Release 1 allows physical attackers to skip activation step...
CVE-2024-20866
Setupwizard on Samsung mobile devices contains an authentication bypass vulnerability prior to SMR May-2024 Release 1, allowing a physical attacker to bypass the activation step. According to PT-2024-18776, the issue affects Setupwizard versions prior to the May-2024 Release 1 and can be mitigate...
CVE-2024-20866
Authentication bypass vulnerability in Setupwizard prior to SMR May-2024 Release 1 allows physical attackers to skip activation step...
CVE-2024-20865
Authentication bypass in bootloader prior to SMR May-2024 Release 1 allows physical attackers to flash arbitrary images...
CVE-2024-20865
Authentication bypass in bootloader prior to SMR May-2024 Release 1 allows physical attackers to flash arbitrary images...
CVE-2024-20865
CVE-2024-20865 describes an authentication bypass in the Samsung bootloader prior to SMR May-2024 Release 1, enabling a physical attacker to flash arbitrary images. The issue affects the bootchain, with evidence of an exploit path in the bootloader (LittleKernel) and PoCs referenced in a GitHub r...
CVE-2024-20864
CVE-2024-20864 affects DarManagerService. The connected sources confirm an improper access-control flaw in DarManagerService that enables local attackers to monitor system resources. Impact is described as local resource monitoring with a base CVSSv3.1 score of 5.5 (Medium), requiring local acces...