PT-2021-16548

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.2.00.22 Description: The issue allows local attackers to perform unauthorized actions without permission by hijacking the PendingIntent. This is due to the use of unsafe PendingIntent in Samsung Notes...

Design/Logic Flaw

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Notes Fixed in version 2.0.02.31. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

CVE-2018-10501

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Notes Fixed in version 2.0.02.31. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

CVE-2018-10501

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Notes Fixed in version 2.0.02.31. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

CVE-2018-10501

The CVE-2018-10501 issue affects Samsung Notes and is a local privilege-escalation vulnerability in the ZIP handling path validation. The root cause is improper validation of a user-supplied path used in file operations, enabling a local attacker to escalate privileges within the application. Aff...

CVE-2018-10501

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Notes Fixed in version 2.0.02.31. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

CVE-2018-10501: Improper Limitation of a Pathname to a Restricted Directory

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Notes Fixed in version 2.0.02.31. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

Samsung Notes Path Traversal Vulnerability

Samsung Notes is a Notes series of smartphone products from Samsung South Korea. A path traversal vulnerability exists in the handling of ZIP files in Samsung Notes, which stems from the program failing to properly validate a user-submitted path before using it when performing file operations. A...

PT-2018-9922

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 2.0.02.31 Description: This issue allows local attackers to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The fl...

(Pwn2Own) Samsung Notes ZIP File Directory Traversal File Write Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Notes. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of ZIP...