2596 matches found
CVE-2023-42530
CVE-2023-42530 affects Samsung Mobile SecSettings prior to SMR Nov-2023 Release 1. The vulnerability is an improper access control that allows enabling Wi‑Fi and Wi‑Fi Direct without user interaction. Reported impact includes potential high integrity impact (I:H) and high confidentiality/availabi...
CVE-2023-42529
Out-of-bound write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to execute arbitrary code...
CVE-2023-42529
The CVE-2023-42529 vulnerability affects the libsec-ril component in Samsung Mobile devices. It is described as an out-of-bounds write that allows a local attacker to execute arbitrary code. The issue is reported to affect versions prior to the SMR Nov-2023 Release 1, with remediation guidance to...
CVE-2023-42529
Out-of-bound write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to execute arbitrary code...
CVE-2023-42528
Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code...
CVE-2023-42528
CVE-2023-42528 affects Samsung devices via the libsec-ril component, specifically the ProcessNvBuffering path. The root cause is improper input validation, enabling a local attacker to execute arbitrary code. The vulnerability is tied to Samsung’s SMR November 2023 Release 1 remediation; affected...
CVE-2023-42527
Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to expose sensitive information...
CVE-2023-42527
CVE-2023-42527 affects libsec-ril, specifically ProcessWriteFile, with improper input validation prior to Samsung SMR Nov-2023 Release 1. A local attacker could expose sensitive information by exploiting this vulnerability. The issue impacts Samsung mobile devices using libsec-ril and is fixed by...
CVE-2023-30739
Summary (CVE-2023-30739): The issue is an Arbitrary File Descriptor Write vulnerability in the libsec-ril module. The initial description and corroborating sources indicate the root cause is a write to a file descriptor that can be manipulated by a local attacker, enabling arbitrary code executio...
CVE-2023-30739
Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code...
CVE-2023-30739
Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code...
PT-2023-28399 · Smr · Smr
Name of the Vulnerable Software and Affected Versions: SMR versions prior to Nov-2023 Release 1 Description: The issue is related to improper input validation with the USB Gadget Interface, allowing a physical attacker to execute arbitrary code in the Kernel. Recommendations: For versions prior t...
SAMSUNG Mobile devices security vulnerability
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices prior to SMR Nov-2023 Release 1, which stems from an out-of-bounds write vulnerability in the libsec-ril module. A...
PT-2023-28403 · Libsaped · Libsaped
Name of the Vulnerable Software and Affected Versions: libsaped versions prior to SMR Nov-2023 Release 1 Description: The issue is related to improper input validation in the get head crc function in libsaped, allowing local attackers to cause out-of-bounds read and write. Recommendations: For...
CVE-2023-30733
Stack-based Buffer Overflow in vulnerability HDCP trustlet prior to SMR Oct-2023 Release 1 allows local privileged attackers to perform code execution...
CVE-2023-30733
Stack-based Buffer Overflow in vulnerability HDCP trustlet prior to SMR Oct-2023 Release 1 allows local privileged attackers to perform code execution...
CVE-2023-30732
Improper access control in system property prior to SMR Oct-2023 Release 1 allows local attacker to get CPU serial number...
CVE-2023-30732
Improper access control in system property prior to SMR Oct-2023 Release 1 allows local attacker to get CPU serial number...