298 matches found
Privilege escalation
In SystemUI, there is a possible arbitrary Activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-202506934...
CVE-2021-39787
In SystemUI, there is a possible arbitrary Activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-202506934...
CVE-2021-39787
CVE-2021-39787 affects Android 12L SystemUI. The issue enables an arbitrary Activity launch via a confused deputy, resulting in local elevation of privilege with no extra execution privileges required and a required user interaction for exploitation. Affected component: SystemUI on Android-12L; r...
PT-2022-11064
Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description In SystemUI, there is a possible arbitrary Activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is...
CVE-2021-39787: Externally Controlled Reference to a Resource in Another Sphere
In SystemUI, there is a possible arbitrary Activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-202506934...
Samsung SystemUI Denial of Service Vulnerability
Samsung SystemUI is a system application for Samsung Samsung mobile devices. A denial of service vulnerability exists in Samsung SystemUI that stems from an exception handling error in SystemUI for multisimbarhidebymeadiafull, which can be exploited by an attacker to cause a denial of service...
CVE-2021-25473
Assuming a shell privilege is gained, an improper exception handling for multisimbarhidebymeadiafull value in SystemUI prior to SMR Oct-2021 Release 1 allows an attacker to cause a permanent denial of service in user device before factory reset...
CVE-2021-25474
Assuming a shell privilege is gained, an improper exception handling for multisimbarshowonqspanel value in SystemUI prior to SMR Oct-2021 Release 1 allows an attacker to cause a permanent denial of service in user device before factory reset...
Design/Logic Flaw
Assuming a shell privilege is gained, an improper exception handling for multisimbarhidebymeadiafull value in SystemUI prior to SMR Oct-2021 Release 1 allows an attacker to cause a permanent denial of service in user device before factory reset...
CVE-2021-25474
Assuming a shell privilege is gained, an improper exception handling for multisimbarshowonqspanel value in SystemUI prior to SMR Oct-2021 Release 1 allows an attacker to cause a permanent denial of service in user device before factory reset...
CVE-2021-25473
Assuming a shell privilege is gained, an improper exception handling for multisimbarhidebymeadiafull value in SystemUI prior to SMR Oct-2021 Release 1 allows an attacker to cause a permanent denial of service in user device before factory reset...
Design/Logic Flaw
Assuming a shell privilege is gained, an improper exception handling for multisimbarshowonqspanel value in SystemUI prior to SMR Oct-2021 Release 1 allows an attacker to cause a permanent denial of service in user device before factory reset...
CVE-2021-25474
Summary (CVE-2021-25474): Samsung SystemUI prior to SMR Oct-2021 Release 1 contains an improper exception handling for the multi_sim_bar_show_on_qspanel value, enabling a user‑device denial of service once a shell privilege is gained. The issue is triggered in SystemUI and results in a permanent ...
CVE-2021-25473
CVE-2021-25473 affects Samsung Galaxy SystemUI prior to SMR Oct-2021 Release 1. The issue is an improper exception handling for the multi_sim_bar_hide_by_meadia_full value, which can allow a local attacker to cause a permanent denial of service on the user device before factory reset. Supported m...
CVE-2021-25473
Assuming a shell privilege is gained, an improper exception handling for multisimbarhidebymeadiafull value in SystemUI prior to SMR Oct-2021 Release 1 allows an attacker to cause a permanent denial of service in user device before factory reset...
Samsung SMR 安全漏洞
Samsung SystemUI is a system application for Samsung Samsung mobile devices. A denial of service vulnerability exists in Samsung SystemUI that stems from an exception handling error in SystemUI for multisimbarhidebymeadiafull, which can be exploited by an attacker to cause a denial of service...
PT-2021-16664
Name of the Vulnerable Software and Affected Versions: SystemUI versions prior to SMR Oct-2021 Release 1 Description: An issue with improper exception handling for the multi sim bar show on qspanel value in SystemUI allows an attacker, assuming shell privilege is gained, to cause a permanent deni...
PT-2021-16663
Name of the Vulnerable Software and Affected Versions: SystemUI versions prior to SMR Oct-2021 Release 1 Description: The issue is related to improper exception handling for the multi sim bar hide by meadia full value in SystemUI. This can be exploited by an attacker who has gained shell privileg...
CVE-2021-25474: Improper Handling of Exceptional Conditions
Assuming a shell privilege is gained, an improper exception handling for multisimbarshowonqspanel value in SystemUI prior to SMR Oct-2021 Release 1 allows an attacker to cause a permanent denial of service in user device before factory reset...
CVE-2021-25473: Improper Handling of Exceptional Conditions
Assuming a shell privilege is gained, an improper exception handling for multisimbarhidebymeadiafull value in SystemUI prior to SMR Oct-2021 Release 1 allows an attacker to cause a permanent denial of service in user device before factory reset...