samsung-android-lpe

파트 1: 임의 AT 명령 실행 CVE-2026-20980 애플리케이션 프로세서AP 명령은 잠금 해제된 장치에서 연결 모드를 전환한 후 atdistributor에 의해 관리됩니다. AT+SWATD=0 AT+ACTIVATE=0,0,0 AT+SWATD=1 atdistributor는 pacmcheckatcmds 함수를 통해 AT 명령을 검증합니다. void mainint32t arg1, void arg2 noreturn int32t var21b0 = arg1; data42c170 = SignalHandler;...

CVE-2023-38297

A vulnerability exists in the com.factory.mmigroup (version 2.1) component on various Android devices, including models from Samsung , T-Mobile , Boost Mobile , Realme , and Lenovo . Due to inadequate access control , local third-party apps can send broadcast Intents to com.factory.mmigroup/.MMIG...

CVE-2023-38297

An issue was discovered in a third-party com.factory.mmigroup component, shipped on devices from multiple device manufacturers. Certain software builds for various Android devices contain a vulnerable pre-installed app with a package name of com.factory.mmigroup versionCode='3', versionName='2.1...