61 matches found
SAMSUNG Mobile devices TelephonyUI 安全漏洞
Samsung TelephonyUI putDsaSimImsi is a Telephony service for Samsung mobile devices that provides support for the Telephony Application Programming Interface TAPI.An information disclosure vulnerability exists in Samsung TelephonyUI putDsaSimImsi, which stems from putDsaSimImsi in TelephonyUI lac...
SAMSUNG Mobile devices TelephonyUI 安全漏洞
An access control error vulnerability exists in Samsung TelephonyUI, a Telephony service for Samsung mobile devices in South Korea that provides support for the Telephony Application Programming Interface TAPI. The vulnerability stems from a lack of proper permission checking in TelephonyUI, whic...
CVE-2022-33700
CVE-2022-33700 affects Samsung TelephonyUI, specifically the putDsaSimImsi path. The vulnerability arises from inadequate protection of sensitive information in TelephonyUI, enabling a local attacker to read IMSI values via logs. The issue is rooted in information disclosure within the putDsaSimI...
CVE-2022-33700
Exposure of Sensitive Information in putDsaSimImsi in TelephonyUI prior to SMR Jul-2022 Release 1 allows local attacker to access imsi via log...
CVE-2022-33699
CVE-2022-33699 affects Samsung TelephonyUI’s getDsaSimImsi, where IMSI can be disclosed through logs due to insufficient protection in TelephonyUI. The issue is a local disclosure vulnerability, enabling a local attacker to access IMSI data. Affected component is Samsung TelephonyUI prior to SMR ...
CVE-2022-33699
Exposure of Sensitive Information in getDsaSimImsi in TelephonyUI prior to SMR Jul-2022 Release 1 allows local attacker to access imsi via log...
CVE-2022-33689
The CVE-2022-33689 entry concerns Samsung TelephonyUI with an improper access control issue. Affected software: TelephonyUI prior to the SMR July 2022 Release 1. Root cause: lack of proper permission checks allows an unprotected binder call to change the device’s preferred network type. Impact: a...
CVE-2022-33689
Improper access control vulnerability in TelephonyUI prior to SMR Jul-2022 Release 1 allows attackers to change preferred network type by unprotected binder call...
PT-2022-21804 · Unknown · Telephonyui
Name of the Vulnerable Software and Affected Versions: TelephonyUI versions prior to SMR Jul-2022 Release 1 Description: The issue is related to improper access control in TelephonyUI, allowing attackers to modify the preferred network type through an unprotected binder call. Recommendations: For...
CVE-2021-25397
An improper access control vulnerability in TelephonyUI prior to SMR MAY-2021 Release 1 allows local attackers to write arbitrary files of telephony process via untrusted applications...
CVE-2021-25397
An improper access control vulnerability in TelephonyUI prior to SMR MAY-2021 Release 1 allows local attackers to write arbitrary files of telephony process via untrusted applications...
Improper access control
An improper access control vulnerability in TelephonyUI prior to SMR MAY-2021 Release 1 allows local attackers to write arbitrary files of telephony process via untrusted applications...
CVE-2021-25397
CVE-2021-25397 concerns an improper access control in Samsung TelephonyUI prior to SMR MAY-2021 Release 1. The issue allows a local attacker, via untrusted applications, to write arbitrary files within the telephony process. Documented impact across sources indicates local privilege escalation po...
CVE-2021-25397
An improper access control vulnerability in TelephonyUI prior to SMR MAY-2021 Release 1 allows local attackers to write arbitrary files of telephony process via untrusted applications...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability previously existed in SAMSUNG Mobile devices SMR MAY-2021 Release 1, which stemmed from an improper access control vulnerabili...
CVE-2013-6835
TelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require user confirmation for FaceTime audio calls, which allows remote attackers to obtain telephone number or e-mail address information via a facetime-audio: URL...
Design/Logic Flaw
TelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require user confirmation for FaceTime audio calls, which allows remote attackers to obtain telephone number or e-mail address information via a facetime-audio: URL...
CVE-2013-6835
TelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require user confirmation for FaceTime audio calls, which allows remote attackers to obtain telephone number or e-mail address information via a facetime-audio: URL...
CVE-2013-6835
CVE-2013-6835 involves Apple iOS prior to 7.1 where, when Safari is used, Facetime-Audio calls could be initiated via a facetime-audio URL without user confirmation, potentially exposing the user’s phone number or email address. The vulnerability arises from lack of user interaction prompting bef...
