CVE-2025-21028

Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items...

CVE-2025-21028

CVE-2025-21028 affects Samsung Mobile ThemeManager. Due to improper privilege management, a local attacker with low privileges can reuse trial items. The fix is to apply the SMR Sep-2025 Release 1 update for ThemeManager (Samsung Mobile firmware). Multiple sources (Red Hat, NVD, CVE lists, PT Sec...

CVE-2025-21027

Improper verification of intent by broadcast receiver in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to temporarily disable the SIM...

CVE-2025-21026

Improper handling of insufficient permission in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to interrupt the call...

CVE-2025-21026

Improper handling of insufficient permission in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to interrupt the call...

CVE-2025-21025

Improper access control in MARsExemptionManager prior to SMR Sep-2025 Release 1 allows local attackers to be excluded from background execution management...

CVE-2025-21025

Improper access control in MARsExemptionManager prior to SMR Sep-2025 Release 1 allows local attackers to be excluded from background execution management...

CVE-2025-21025

CVE-2025-21025 affects MARsExemptionManager in Samsung Mobile devices. The issue is improper access control in MARsExemptionManager before SMR Sep-2025 Release 1, enabling a local attacker to be excluded from background execution management. Documented details indicate the vulnerability is local ...

CVE-2023-21480

Improper input validation vulnerability in CertByte prior to SMR Apr-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-21480

Improper input validation vulnerability in CertByte prior to SMR Apr-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-21478

Improper input validation vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data...

CVE-2023-21478

Improper input validation vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data...

CVE-2023-21478

CVE-2023-21478 affects the TIGERF trustlet prior to SMR Apr-2023 Release 1. The vulnerability is due to improper input validation and could allow local attackers to access protected data. Affected component is the TIGERF trustlet; impact is exposure of data to a local attacker. Public exploit det...

CVE-2023-21477

Access of Memory Location After End of Buffer vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data...

CVE-2023-21477

Access of Memory Location After End of Buffer vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data...

CVE-2023-21477

The CVE-2023-21477 issue affects the TIGERF trustlet in Samsung Mobile devices, where an Access of Memory Location After End of Buffer vulnerability within the trustlet allows a local attacker to access protected data. Affected component: TIGERF trustlet; affected versions: prior to SMR Apr-2023 ...

CVE-2023-21470

Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location information using com.samsung.android.wifi.NETWORKLOCATION action...

CVE-2023-21470

CVE-2023-21470 affects Samsung SLocation prior to SMR Apr-2022 Release 1. The underlying issue is improper access control enabling local attackers to obtain device location information via the com.samsung.android.wifi.NETWORK_LOCATION action. Reported impact includes confidentiality exposure with...

CVE-2023-21469

CVE-2023-21469 describes an improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1. Local attackers can obtain device location information by invoking the com.samsung.android.wifi.GEOFENCE action. Root cause: improper access control. Impact (as stated): potential discl...

CVE-2023-21469

Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location information using com.samsung.android.wifi.GEOFENCE action...