CVE-2024-20864

Improper access control vulnerability in DarManagerService prior to SMR May-2024 Release 1 allows local attackers to monitor system resources...

CVE-2024-20863

Out of bounds write vulnerability in SNAP in HAL prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code...

CVE-2024-20863

SNAP in HAL is affected (prior to SMR May-2024 Release 1) by an out-of-bounds write vulnerability that allows local privileged attackers to execute arbitrary code. The issue is evidenced by PT-2024-18774 and corroborated by multiple sources referencing the HAL SNAP exposure and the same impact. R...

CVE-2024-20863

Out of bounds write vulnerability in SNAP in HAL prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code...

CVE-2024-20862

CVE-2024-20862 affects SveService on Samsung Mobile devices prior to SMR May-2024 Release 1. The vulnerability is an out-of-bounds write that enables local privileged attackers to execute arbitrary code. Exploitation details are not provided in the sources, and no in-the-wild exploit information ...

CVE-2024-20862

Out-of-bounds write in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code...

CVE-2024-20862

Out-of-bounds write in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code...

CVE-2024-20861

Use after free vulnerability in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to cause memory corruption...

CVE-2024-20861

Use after free vulnerability in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to cause memory corruption...

CVE-2024-20861

CVE-2024-20861 is a use-after-free vulnerability in SveService on Samsung Mobile devices before SMR May-2024 Release 1, enabling local privileged attackers to cause memory corruption. Affected component: SveService; root cause: use-after-free. Impact per sources: local privilege escalation with p...

CVE-2024-20860

Improper export of android application components vulnerability in TelephonyUI prior to SMR May-2024 Release 1 allows local attackers to reboot the device without proper permission...

CVE-2024-20860

Improper export of android application components vulnerability in TelephonyUI prior to SMR May-2024 Release 1 allows local attackers to reboot the device without proper permission...

CVE-2024-20860

Summary of CVE-2024-20860 : An improper export of Android application components vulnerability in TelephonyUI affects Samsung mobile devices. The root cause is mis-export of components within TelephonyUI, enabling local attackers to reboot the device without proper permission. The vulnerability i...

CVE-2024-20859

Improper access control vulnerability in FactoryCamera prior to SMR May-2024 Release 1 allows local attackers to take pictures without privilege...

CVE-2024-20859

Improper access control vulnerability in FactoryCamera prior to SMR May-2024 Release 1 allows local attackers to take pictures without privilege...

CVE-2024-20858

The CVE-2024-20858 issue relates to CocktailBarService’s setCocktailHostCallbacks function. Affected: CocktailBarService prior to SMR May-2024 Release 1. Risk: improper access control allowing local attackers to access information from the current application (confidentiality impact high per CVE)...

CVE-2024-20858

Improper access control vulnerability in setCocktailHostCallbacks of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to access information of current application...

CVE-2024-20858

Improper access control vulnerability in setCocktailHostCallbacks of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to access information of current application...

CVE-2024-20857

Improper access control vulnerability in startListening of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to access information of current application...

CVE-2024-20857

CVE-2024-20857 affects CocktailBarService: startListening exposes information due to improper access control, with affected versions prior to SMR May-2024 Release 1. Exploitation details are not provided in the documents. PT-Security lists a workaround to disable startListening as a temporary mea...