7322 matches found
CVE-2025-20983
Out-of-bounds write in checking auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...
CVE-2025-21009
The CVE-2025-21009 entry describes an out-of-bounds read in decoding a malformed frame header in libsavsvc.so, affecting Android prior to 15. This vulnerability can allow local attackers to cause memory corruption. Evidence across connected records indicates the issue is tied to the libsavsvc.so ...
CVE-2025-21008
Out-of-bounds read in decoding frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption...
CVE-2025-21008
CVE-2025-21008 is an out-of-bounds read in the decoding frame header of libsavsvc.so on Android before 15, enabling local memory corruption. Affected component: libsavsvc.so (Android stack); root cause: out-of-bounds read in frame header decoding. Impact per sources: local attacker can cause memo...
CVE-2025-21007
Out-of-bounds write in accessing uninitialized memory in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption...
CVE-2025-21007
Out-of-bounds write in accessing uninitialized memory in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption...
CVE-2025-21006
Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 allows local attackers to write out-of-bounds memory...
CVE-2025-21006
CVE-2025-21006 describes an out-of-bounds write in the MPEG-4 macroblock handling of the libsavsvc.so library, affecting some Samsung/Android components prior to Android 15. The underlying issue is a memory corruption risk due to improper handling of macro blocks in the MPEG4 codec, allowing a lo...
CVE-2025-21005
Improper access control in isemtelephony prior to Android 15 allows local attackers to access sensitive information...
CVE-2025-21004
Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to power off the device...
CVE-2025-21003
Insecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows local attackers to access sensitive information...
CVE-2025-21003
CVE-2025-21003 concerns insecure storage of sensitive information in Samsung’s Emergency SOS prior to SMR Jul-2025 Release 1, allowing a local attacker to access sensitive data. Connected sources confirm the issue affects Emergency SOS and indicate the vulnerability arises from insecure storage, ...
CVE-2025-21002
Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to manipulate broadcasting Auracast...
CVE-2025-21002
CVE-2025-21002 affects LeAudioService before SMR Jul-2025 Release 1. The issue is improper access control that lets a local attacker manipulate broadcasting Auracast. The vulnerability is rooted in inadequate restrictions on who can perform Auracast-related operations, enabling potential manipula...
CVE-2025-21002
Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to manipulate broadcasting Auracast...
CVE-2025-21001
CVE-2025-21001 affects LeAudioService prior to SMR Jul-2025 Release 1. The issue is improper access control that enables local attackers to stop Auracast broadcasting. Affects Samsung Mobile devices; exploitability is local (L) with low complexity and no user interaction; impact is loss of availa...
CVE-2025-21000
Improper privilege management in Bluetooth prior to SMR Jul-2025 Release 1 allows local attackers to enable Bluetooth...
CVE-2025-21000
Improper privilege management in Bluetooth prior to SMR Jul-2025 Release 1 allows local attackers to enable Bluetooth...