Information disclosure

Exposure of Sensitive Information vulnerability in Samsung Settings prior to SMR Dec-2022 Release 1 allows local attackers to access the Network Access Identifier via log...

Information disclosure

Exposure of Sensitive Information vulnerability in kernel prior to SMR Dec-2022 Release 1 allows attackers to access the kernel address information via log...

Improper access control

Improper access control vulnerability in Nice Catch prior to SMR Dec-2022 Release 1 allows physical attackers to access contents of all toast generated in the application installed in Secure Folder through Nice Catch...

Authentication flaw

Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network traffic encryption between UE and gNodeB...

Improper access control

Improper access control vulnerability in IIccPhoneBook prior to SMR Dec-2022 Release 1 allows attackers to access some information of usim...

Improper access control

Improper access control vulnerability in SecTelephonyProvider prior to SMR Dec-2022 Release 1 allows attackers to access message information...

CVE-2022-39894

Improper access control vulnerability in ContactListStartActivityHelper in Phone prior to SMR Dec-2022 Release 1 allows to access sensitive information via implicit intent...

CVE-2022-39895

Improper access control vulnerability in ContactListUtils in Phone prior to SMR Dec-2022 Release 1 allows to access contact group information via implicit intent...

CVE-2022-39896

Improper access control vulnerabilities in Contacts prior to SMR Dec-2022 Release 1 allows to access sensitive information via implicit intent...

CVE-2022-39898

Improper access control vulnerability in IIccPhoneBook prior to SMR Dec-2022 Release 1 allows attackers to access some information of usim...

CVE-2022-39899

Improper authentication vulnerability in Samsung WindowManagerService prior to SMR Dec-2022 Release 1 allows attacker to send the input event using S Pen gesture...

CVE-2022-39900

Improper access control vulnerability in Nice Catch prior to SMR Dec-2022 Release 1 allows physical attackers to access contents of all toast generated in the application installed in Secure Folder through Nice Catch...

CVE-2022-39904

Exposure of Sensitive Information vulnerability in Samsung Settings prior to SMR Dec-2022 Release 1 allows local attackers to access the Network Access Identifier via log...

CVE-2022-39905

Implicit intent hijacking vulnerability in Telecom application prior to SMR Dec-2022 Release 1 allows attacker to access sensitive information via implicit intent...

CVE-2022-39907

Integer overflow vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attacker to perform Out-Of-Bounds Write...

CVE-2022-39904

CVE-2022-39904 affects Samsung Settings on Samsung mobile devices prior to SMR Dec-2022 Release 1. The issue is an information disclosure where the Network Access Identifier is exposed in logs, allowing local attackers to access it. Affected component: Samsung Settings; root cause: log exposure o...

CVE-2022-39897

The CVE-2022-39897 issue affects Samsung Kernel prior to SMR Dec-2022 Release 1, enabling an attacker with local access to leak kernel address information via system logs, i.e., an information disclosure vulnerability. Documented impact: kernel address data exposure with impact on confidentiality...

CVE-2022-39896

CVE-2022-39896 affects Samsung Contacts prior to SMR Dec-2022 Release 1. The issue is improper access control that could allow access to sensitive information via implicit intents. Affected component: Contacts; root cause identified as access-control weakness. Impact described in sources as expos...

CVE-2022-39895

The CVE-2022-39895 entry concerns an improper access control vulnerability in ContactListUtils on Samsung Phone software prior to SMR Dec-2022 Release 1. The issue allows access to contact group information via implicit intents, attributed to the ContactListUtils component. Affected product scope...

CVE-2022-39894

CVE-2022-39894 affects Samsung Phone’s ContactListStartActivityHelper. The issue is an improper access control that can expose sensitive information via an implicit intent in versions prior to the SMR Dec-2022 Release 1. Public sources (NVD/Red Hat/CNNVD/PT-Security) describe the vulnerability as...