EUVD-2023-46993

Malicious code in bioql PyPI...

CVE-2023-42564

Improper access control in knoxcustom service prior to SMR Dec-2023 Release 1 allows attacker to send broadcast with system privilege...

CVE-2023-42561

Heap out-of-bounds write vulnerability in bootloader prior to SMR Dec-2023 Release 1 allows a physical attacker to execute arbitrary code...

CVE-2023-42560

Heap out-of-bounds write vulnerability in decmonoaudb of libsavsac.so prior to SMR Dec-2023 Release 1 allows an attacker to execute arbitrary code...

CVE-2023-42559

Improper exception management vulnerability in Knox Guard prior to SMR Dec-2023 Release 1 allows Knox Guard lock bypass via changing system time...

Heap overflow

Heap out-of-bounds write vulnerability in decmonoaudb of libsavsac.so prior to SMR Dec-2023 Release 1 allows an attacker to execute arbitrary code...

CVE-2023-42563

Integer overflow vulnerability in landmarkCopyImageToNative of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow...

CVE-2023-42569

CVE-2023-42569 concerns an improper authorization verification in Samsung’s AR Emoji, prior to the SMR Dec-2023 Release 1. The issue allows an attacker to read sandbox data from AR Emoji. Affected: AR Emoji components on Samsung devices. Root cause: improper authorization verification. Impact: re...

CVE-2023-42568

CVE-2023-42568 affects SmartManagerCN prior to SMR Dec-2023 Release 1. The root cause is improper access control, enabling local attackers to access arbitrary files with system privileges. Public records in NVD/Red Hat/PRION reinforce the same impact and 해당 Samsung advisories reference SMR Dec-20...

CVE-2023-42567

CVE-2023-42567 affects the softsimd component. The issue is an improper size check that enables a stack-based buffer overflow in softsimd prior to SMR Dec-2023 Release 1. Documented impact is a potential overflow; exploitation details are not provided in the sources. A remediation path is to upda...

CVE-2023-42566

CVE-2023-42566 targets the libsavsvc component used in Samsung Mobile devices. The issue is described as an out-of-bounds write, with the root cause tied to libsavsvc prior to the SMR Dec-2023 Release 1. The documented impact is local code execution by attackers, with consequences described as ar...

CVE-2023-42565

Improper input validation vulnerability in Smart Clip prior to SMR Dec-2023 Release 1 allows local attackers with shell privilege to execute arbitrary code...

CVE-2023-42565

Summary: CVE-2023-42565 affects Samsung Smart Clip prior to SMR Dec-2023 Release 1. The issue is an improper input validation vulnerability that enables local attackers with shell privileges to execute arbitrary code. The primary affected component is Smart Clip, with the root cause stated as inp...

CVE-2023-42564

The CVE-2023-42564 issue concerns Samsung Knox knoxcustom service. Affected software/hardware: Samsung mobile devices running Knoxcustom prior to the SMR Dec-2023 Release 1. Vulnerable component: knoxcustom service. Root cause: improper access control that enables a broadcast to be sent with syst...

CVE-2023-42562

CVE-2023-42562 affects Samsung devices via the libFacePreProcessingjni.camera.samsung.so library, where an integer overflow in the function detectionFindFaceSupportMultiInstance can trigger a heap overflow. Technical details indicate versions prior to SMR Dec-2023 Release 1 are affected. Remediat...

CVE-2023-42561

CVE-2023-42561 is a heap out-of-bounds write vulnerability in the bootloader prior to Samsung SMR Dec-2023 Release 1. The issue allows a physical attacker to execute arbitrary code. No exploitation details are provided in the documents. Samsung’s security bulletin references a December 2023 patch...

CVE-2023-42560

CVE-2023-42560 is a heap out-of-bounds write in dec_mono_audb within libsavsac.so, affecting Samsung Mobile prior to SMR Dec-2023 Release 1. The vulnerability allows arbitrary code execution and is documented across multiple sources (e.g., NVD/Red Hat/CVE listed, Samsung security advisories). Aff...

CVE-2023-42558

CVE-2023-42558 is a Samsung vulnerability describing an out-of-bounds write in the HDCP component within HAL prior to Samsung SMR December 2023 Release 1, allowing attacker code execution. The connected sources consistently identify the affected area as HAL/HDCP and note that remediation is provi...

CVE-2023-42556

CVE-2023-42556 affects Samsung Contacts prior to SMR Dec-2023 Release 1. The issue is due to improper usage of implicit intents in Contacts, enabling an attacker to obtain sensitive information. Affected component: Contacts (Samsung Mobile). Impact is limited to information disclosure; CVSS data ...

CVE-2023-42556

Improper usage of implicit intent in Contacts prior to SMR Dec-2023 Release 1 allows attacker to get sensitive information...