1096 matches found
Improper access control
Improper access control vulnerability in SamsungContacts prior to SMR Apr-2022 Release 1 allows that attackers can access contact information without permission...
Null pointer dereference
Null pointer dereference vulnerability in parserirot function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker...
Improper access control
Improper access control vulnerability in S Secure prior to SMR Apr-2022 Release 1 allows physical attackers to access secured data in certain conditions...
Null pointer dereference
Null pointer dereference vulnerability in parserinfe function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds read by remote attackers...
Out-of-bounds
Improper boundary check in sflvdrdbufbits of libsflvextractor prior to SMR Apr-2022 Release 1 allows attackers to read out of bounds memory...
Design/Logic Flaw
Improper size check in sapefdparsemetaHEADER function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file...
Heap overflow
Heap-based buffer overflow vulnerability in sheifdgetinfoimage function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker...
Input validation
Improper validation vulnerability in MediaMonitorDimension prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities...
CVE-2022-27836
Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1 allow local attackers to access arbitrary system files without a proper permission. The patch adds proper validation logic to prevent arbitrary files access...
CVE-2022-27835
CVE-2022-27835 describes an improper boundary check in Samsung SMR UWB firmware prior to Apr-2022 Release 1, enabling arbitrary memory write. Affected component: UWB firmware used in Samsung SMR patch package; root cause: insufficient boundary validation in the firmware. Impact stated: potential ...
CVE-2022-27834
Use after free vulnerability in dspcontextunloadgraph function of DSP driver prior to SMR Apr-2022 Release 1 allows attackers to perform malicious actions...
CVE-2022-27834
CVE-2022-27834: Use-after-free in the DSP driver’s dsp_context_unload_graph function (pre-SMR Apr-2022 Release 1). Affects the DSP driver; attackers could cause malicious actions. Root cause: use-after-free in the affected function. CVSS details show high impact under CVSS 3.1 (LOCAL, HIGH impact...
CVE-2022-27833
Improper input validation in DSP driver prior to SMR Apr-2022 Release 1 allows out-of-bounds write by integer overflow...
CVE-2022-27832
Improper boundary check in media.extractor library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of service via a crafted media file...
CVE-2022-27831
Improper boundary check in sflvdrdbufbits of libsflvextractor prior to SMR Apr-2022 Release 1 allows attackers to read out of bounds memory...
CVE-2022-27830
Improper validation vulnerability in SemBlurInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities...
CVE-2022-27830
CVE-2022-27830 describes an improper validation vulnerability in the SemBlurInfo component prior to Samsung SMR Apr-2022 Release 1, enabling attackers with local access to launch certain activities. The NVD entry lists a High risk (CVSS v3.1: 7.8) with LOCAL access, LOW attack complexity, and no ...
CVE-2022-27829
Improper validation vulnerability in VerifyCredentialResponse prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities...
CVE-2022-27829
CVE-2022-27829 is described across multiple connected sources as an improper validation vulnerability in Samsung SMR’s VerifyCredentialResponse prior to SMR Apr-2022 Release 1. The issue enables attackers to launch certain activities, with affected entities typically within the device’s local tru...