CVE-2023-30665

CVE-2023-30665 describes an improper input validation vulnerability in OnOemServiceMode within the libsec-ril component, leading to a local out-of-bounds read. Reported as a Samsung mobile/SR patch issue (SMR Jul-2023 Release 1), with exploitation requiring local access and low privileges. Public...

CVE-2023-30665

Improper input validation vulnerability in OnOemServiceMode in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds read...

CVE-2023-30665

Improper input validation vulnerability in OnOemServiceMode in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds read...

CVE-2023-30664

CVE-2023-30664 is an improper input validation vulnerability in Samsung Mobile devices, originating from the RegisteredMSISDN module in the SMR Jul-2023 Release 1. It enables local attackers to launch privileged activities. The issue is tied to Samsung’s patch cycle, with remediation provided in ...

CVE-2023-30664

Improper input validation vulnerability in RegisteredMSISDN prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-30663

CVE-2023-30663 describes an improper input validation vulnerability in the Samsung/libsec-ril component, specifically the OemPersonalizationSetLock function, which may allow a local attacker to perform an out-of-bounds write. The issue is tied to Samsung Mobile devices running the affected SMR Ju...

CVE-2023-30659

CVE-2023-30659 affects SAMSUNG Mobile devices, specifically the Transaction module prior to SMR Jul-2023 Release 1. The root cause is improper input validation, enabling local attackers to perform privileged activities. Impact is described as local privilege escalation with high confidentiality, ...

CVE-2023-30658

The CVE-2023-30658 issue affects the DataProfile module in Samsung devices (SMR Jul-2023 Release 1). Root cause: improper input validation, enabling a local attacker to perform privileged activities. Impact is described as high, with local attack vector and privileges required as low, no user int...

CVE-2023-30658

Improper input validation vulnerability in DataProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-30658

Improper input validation vulnerability in DataProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-30657

The CVE-2023-30657 issue affects Samsung EnhancedAttestationResult and is caused by improper input validation. The vulnerability allows local attackers to execute privileged activities on affected devices. Samsung’s documentation indicates the vulnerability was addressed in the SMR Jul-2023 Relea...

CVE-2023-30656

CVE-2023-30656 concerns LSOItemData with an improper input validation flaw that could allow an attacker to launch certain activities. Technical details in connected documents identify LSOItemData as affected, with impact tied to improper input validation and a requirement that vulnerable versions...

CVE-2023-30655

Improper input validation vulnerability in SCEPProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-30655

Improper input validation vulnerability in SCEPProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...

ROS-2-1741

2.1741 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...

CVE-2023-30655: Improper Input Validation

Improper input validation vulnerability in SCEPProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-30658: Improper Input Validation

Improper input validation vulnerability in DataProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-30657: Improper Input Validation

Improper input validation vulnerability in EnhancedAttestationResult prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-30664: Improper Input Validation

Improper input validation vulnerability in RegisteredMSISDN prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...

PT-2023-22862 · Unknown · Libsec-Ril

Name of the Vulnerable Software and Affected Versions: libsec-ril versions prior to SMR Jul-2023 Release 1 Description: The issue is related to an improper input validation vulnerability in the DoOemImeiSetPreconfig function within libsec-ril. This vulnerability allows local attackers to cause an...