Design/Logic Flaw

PendingIntent hijacking in WifiGeofenceManager prior to SMR Aug-2023 Release 1 allows local attacker to arbitrary file access...

CVE-2023-30701

PendingIntent hijacking in WifiGeofenceManager prior to SMR Aug-2023 Release 1 allows local attacker to arbitrary file access...

CVE-2023-30701

PendingIntent hijacking in WifiGeofenceManager prior to SMR Aug-2023 Release 1 allows local attacker to arbitrary file access...

CVE-2023-30701

Summary: CVE-2023-30701 corresponds to a PendingIntent hijacking flaw in Samsung WifiGeofenceManager, affecting pre-SMR Aug-2023 Release 1. The issue enables a local attacker to gain arbitrary file access via hijacked PendingIntents. Public details in connected sources indicate the affected compo...

CVE-2023-30700

PendingIntent hijacking vulnerability in SemWifiApTimeOutImpl in framework prior to SMR Aug-2023 Release 1 allows local attackers to access ContentProvider without proper permission...

CVE-2023-30699

Out-of-bounds write vulnerability in parserhvcC function of libsimba library prior to SMR Aug-2023 Release 1 allows code execution by remote attackers...

CVE-2023-30699

CVE-2023-30699 is an out-of-bounds write vulnerability in the libsimba library’s parser_hvcC function, affecting Samsung mobile devices prior to SMR Aug-2023 Release 1. The issue allows remote code execution and has been addressed in the SMR Aug-2023 Release 1 or later. Connected sources indicate...

CVE-2023-30698

Technical details (affected product/version, exploit vector, impact, patches) are not publicly provided in the connected documents for CVE-2023-30698. Monitor for updates from NVD/Red Hat/Samsung advisories.

CVE-2023-30697

CVE-2023-30697 : An improper input validation in IpcTxCfgSetSimlockPayload within Samsung libsec-ril leads to an out-of-bounds write. Affected: Samsung Mobile devices with SMR Aug-2023 Release 1 and related Samsung patches. Impact is described as high for confidentiality, integrity, and availabil...

CVE-2023-30696

An improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write...

CVE-2023-30694

CVE-2023-30694 affects the libsec-ril component (IpcTxPcscTransmitApdu). The root cause is an out-of-bounds write in this function, allowing a local attacker to execute arbitrary code on vulnerable devices. Affected product scope is Samsung Mobile firmware prior to the SMR Aug-2023 Release 1. The...

CVE-2023-30694

Out-of-bounds Write in IpcTxPcscTransmitApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code...

CVE-2023-30694

Out-of-bounds Write in IpcTxPcscTransmitApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code...

CVE-2023-30693

CVE-2023-30693 concerns an out-of-bounds write in libsec-ril’s DoOemFactorySendFactoryBypassCommand. Multiple connected sources consistently describe this as a local privilege escalation/remote code execution vector, where a local attacker can execute arbitrary code due to a bounds check issue in...

CVE-2023-30693

Out-of-bounds Write in DoOemFactorySendFactoryBypassCommand of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code...

CVE-2023-30693

Out-of-bounds Write in DoOemFactorySendFactoryBypassCommand of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code...

CVE-2023-30691

Parcel mismatch in AuthenticationConfig prior to SMR Aug-2023 Release 1 allows local attacker to privilege escalation...

CVE-2023-30689

CVE-2023-30689 affects Samsung Mobile devices, caused by an out-of-bounds write in libsec-ril’s BuildOemEmbmsGetSigStrengthResponse. A local attacker can trigger arbitrary code execution. Samsung fixed this in SMR Aug-2023 Release 1; update devices via the Samsung security bulletin. Exploitation ...

CVE-2023-30689

Out-of-bounds Write in BuildOemEmbmsGetSigStrengthResponse of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code...

CVE-2023-30688

The CVE-2023-30688 entry covers an out-of-bounds write in MakeUiccAuthForOem of libsec-ril, reported for Samsung Mobile devices in the SMR Aug-2023 Release 1. The issue enables a local attacker to execute arbitrary code. Public references in the provided documents identify the affected component ...