7322 matches found
CVE-2025-20953
Improper access control in SmartManagerCN prior to SMR May-2025 Release 1 allows local attackers to launch activities within SmartManagerCN...
CVE-2025-20954
Use of implicit intent for sensitive communication in EnrichedCall prior to SMR May-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability...
CVE-2025-20959
Use of implicit intent for sensitive communication in Wi-Fi P2P service prior to SMR May-2025 Release 1 allows local attackers to access sensitive information...
CVE-2025-20955
Improper Export of Android Application Components in NotificationHistoryImageProvider prior to SMR May-2025 Release 1 allows local attackers to access notification images...
CVE-2025-20937
Out-of-bounds write in Keymaster trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...
CVE-2025-20980
The CVE-2025-20980 entry concerns Samsung/libsavscmn with an out-of-bounds write that leads to memory corruption on devices running Android prior to 15. Affected component: libsavscmn (memory corruption vulnerability). Root cause: out-of-bounds write. Impact: local attackers could trigger memory ...
CVE-2025-20980
Out-of-bounds write in libsavscmn prior to Android 15 allows local attackers to cause memory corruption...
CVE-2025-20978
The CVE-2025-20978 entry concerns Samsung PENUP, where improper access control in PENUP prior to version 3.9.19.32 allows local attackers to access files with PENUP privilege. Affected software: PENUP (Samsung). Root cause: improper access control in the application, enabling local privilege abus...
CVE-2025-20978
Improper access control in PENUP prior to version 3.9.19.32 allows local attackers to access files with PENUP privilege...
CVE-2025-20977
Samsung Notes is affected by CVE-2025-20977 due to use of implicit intent for sensitive translation communication. The vulnerability affects versions prior to 4.4.29.23, enabling local attackers to obtain sensitive information with user interaction required to trigger. The issue is tied to the tr...
CVE-2025-20975
Improper Export of Android Application Components in AODService prior to version 8.8.28.12 allows local attackers to launch arbitrary activity with systemui privilege...
CVE-2025-20971
Improper input validation in Samsung Flow prior to version 4.9.17.6 allows local attackers to access data within Samsung Flow...
CVE-2025-20971
Improper input validation in Samsung Flow prior to version 4.9.17.6 allows local attackers to access data within Samsung Flow...
CVE-2025-20969
Improper input validation in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows local attackers to access data within Samsung Gallery...
CVE-2025-20969
CVE-2025-20969 affects Samsung Gallery: improper input validation allows a local attacker to access data within the app. Affected versions are pre-14.5.10.3 (Global Android 13), pre-14.5.09.3 (China Android 13), and pre-15.5.04.5 (Android 14). Remediation: update to 14.5.10.3+/14.5.09.3+/15.5.04....
CVE-2025-20969
Improper input validation in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows local attackers to access data within Samsung Gallery...
CVE-2025-20965
Improper handling of insufficient permission in Bixby wakeup prior to version 2.3.74.8 allows local attackers to access sensitive data...
CVE-2025-20964
CVE-2025-20964 describes an out-of-bounds write in parsing media files within the libsavsvc.so component, enabling local attackers to write memory outside allocated buffers. Multiple sources corroborate the issue and link it to Samsung SMR updates; Samsung’s advisory references a May-2025 SMR rel...