CVE-2023-42564

The CVE-2023-42564 issue concerns Samsung Knox knoxcustom service. Affected software/hardware: Samsung mobile devices running Knoxcustom prior to the SMR Dec-2023 Release 1. Vulnerable component: knoxcustom service. Root cause: improper access control that enables a broadcast to be sent with syst...

CVE-2023-42562

CVE-2023-42562 affects Samsung devices via the libFacePreProcessingjni.camera.samsung.so library, where an integer overflow in the function detectionFindFaceSupportMultiInstance can trigger a heap overflow. Technical details indicate versions prior to SMR Dec-2023 Release 1 are affected. Remediat...

CVE-2023-42561

CVE-2023-42561 is a heap out-of-bounds write vulnerability in the bootloader prior to Samsung SMR Dec-2023 Release 1. The issue allows a physical attacker to execute arbitrary code. No exploitation details are provided in the documents. Samsung’s security bulletin references a December 2023 patch...

CVE-2023-42561

Heap out-of-bounds write vulnerability in bootloader prior to SMR Dec-2023 Release 1 allows a physical attacker to execute arbitrary code...

CVE-2023-42560

Heap out-of-bounds write vulnerability in decmonoaudb of libsavsac.so prior to SMR Dec-2023 Release 1 allows an attacker to execute arbitrary code...

CVE-2023-42560

CVE-2023-42560 is a heap out-of-bounds write in dec_mono_audb within libsavsac.so, affecting Samsung Mobile prior to SMR Dec-2023 Release 1. The vulnerability allows arbitrary code execution and is documented across multiple sources (e.g., NVD/Red Hat/CVE listed, Samsung security advisories). Aff...

CVE-2023-42559

CVE-2023-42559 affects Samsung Knox Guard on Samsung mobile devices. The root cause is improper exception management that enables a lock bypass by changing the system time, prior to SMR Dec-2023 Release 1. Impact is primarily confidentiality (high) with low integrity, and no availability impact. ...

CVE-2023-42558

CVE-2023-42558 is a Samsung vulnerability describing an out-of-bounds write in the HDCP component within HAL prior to Samsung SMR December 2023 Release 1, allowing attacker code execution. The connected sources consistently identify the affected area as HAL/HDCP and note that remediation is provi...

CVE-2023-42558

Out of bounds write vulnerability in HDCP in HAL prior to SMR Dec-2023 Release 1 allows attacker to perform code execution...

CVE-2023-42557

Out-of-bound write vulnerability in libIfaaCa prior to SMR Dec-2023 Release 1 allows local system attackers to execute arbitrary code...

CVE-2023-42556

CVE-2023-42556 affects Samsung Contacts prior to SMR Dec-2023 Release 1. The issue is due to improper usage of implicit intents in Contacts, enabling an attacker to obtain sensitive information. Affected component: Contacts (Samsung Mobile). Impact is limited to information disclosure; CVSS data ...

CVE-2023-42556

Improper usage of implicit intent in Contacts prior to SMR Dec-2023 Release 1 allows attacker to get sensitive information...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices prior to SMR Dec-2023 Release 1, which stems from a heap out-of-bounds write vulnerability in...

CVE-2023-42570: Undefined Security Weakness

Improper access control vulnerability in KnoxCustomManagerService prior to SMR Dec-2023 Release 1 allows attacker to access device SIM PIN...

CVE-2023-42559: Improper Handling of Exceptional Conditions

Improper exception management vulnerability in Knox Guard prior to SMR Dec-2023 Release 1 allows Knox Guard lock bypass via changing system time...

CVE-2023-42560: Out-of-bounds Write

Heap out-of-bounds write vulnerability in decmonoaudb of libsavsac.so prior to SMR Dec-2023 Release 1 allows an attacker to execute arbitrary code...

laposadadelfriki.com Improper Access Control vulnerability OBB-3803098

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-28429

Name of the Vulnerable Software and Affected Versions libsavsac.so versions prior to SMR Dec-2023 Release 1 Description A heap out-of-bounds write issue in the dec mono audb function of libsavsac.so allows an attacker to execute arbitrary code. Recommendations For versions prior to SMR Dec-2023...

aftouch-cuisine.com Cross Site Scripting vulnerability OBB-3800579

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kernel: memory leak in ttusb_dec_exit_dvb() in media/usb/ttusb-dec/ttusb_dec.c

A memory leak issue was found in the Linux kernel media subsystem in the TTUSB DEC driver. It could occur in the ttusbdecexitdvb function because of the lack of a dvbfrontenddetach call. A local user could trigger this flaw by repeatedly plugging and unplugging the device, potentially causing a...