7322 matches found
CVE-2024-34678
Out-of-bounds write in libsapeextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption...
CVE-2024-34681
Improper input validation in BluetoothAdapter prior to SMR Nov-2024 Release 1 allows local attackers to cause local permanent denial of service on Galaxy Watch...
CVE-2024-34677
Exposure of sensitive information in System UI prior to SMR Nov-2024 Release 1 allow local attackers to make malicious apps appear as legitimate...
CVE-2024-34673
Improper Input Validation in IpcProtocol in Modem prior to SMR Nov-2024 Release 1 allows local attackers to cause Denial-of-Service...
CVE-2024-34677
Exposure of sensitive information in System UI prior to SMR Nov-2024 Release 1 allow local attackers to make malicious apps appear as legitimate...
CVE-2024-34676
Out-of-bounds write in parsing subtitle file in libsubextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption. User interaction is required for triggering this vulnerability...
CVE-2024-49409
Out-of-bounds write in Battery Full Capacity node prior to Firmware update Sep-2024 Release on Galaxy S24 allows local attackers to write out-of-bounds memory. System privilege is required for triggering this vulnerability...
CVE-2024-49409
Out-of-bounds write in Battery Full Capacity node prior to Firmware update Sep-2024 Release on Galaxy S24 allows local attackers to write out-of-bounds memory. System privilege is required for triggering this vulnerability...
CVE-2024-49409
The vulnerability CVE-2024-49409 affects Galaxy S24 devices in the Battery Full Capacity node. The root cause is an out-of-bounds write, exploitable by a local attacker who already has system privileges. Affects Galaxy S24 firmware prior to the Sep-2024 Release. Remediation is to update to the Se...
CVE-2024-49408
Out-of-bounds write in usb driver prior to Firmware update Sep-2024 Release on Galaxy S24 allows local attackers to write out-of-bounds memory. System privilege is required for triggering this vulnerability...
CVE-2024-49408
Out-of-bounds write in usb driver prior to Firmware update Sep-2024 Release on Galaxy S24 allows local attackers to write out-of-bounds memory. System privilege is required for triggering this vulnerability...
CVE-2024-49406
Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to modify transaction. Root privilege is required for triggering this vulnerability...
CVE-2024-49406
CVE-2024-49406 affects Samsung’s Blockchain Keystore prior to 1.3.16. The issue is improper validation of the integrity check value, enabling a local attacker with root privileges to modify transactions. Products/versions: Blockchain Keystore before 1.3.16. Root privileges are required; attack ve...
CVE-2024-49401
CVE-2024-49401 affects Samsung Mobile devices using Settings Suggestions prior to SMR Nov-2024 Release 1. The issue is due to improper input validation in Settings Suggestions, enabling a local attacker with low privileges to perform privileged activities. Impact is described as potential local p...
CVE-2024-49401
Improper input validation in Settings Suggestions prior to SMR Nov-2024 Release 1 allows local attackers to launch privileged activities...
CVE-2024-49401
Improper input validation in Settings Suggestions prior to SMR Nov-2024 Release 1 allows local attackers to launch privileged activities...
CVE-2024-34681
The issue affects Galaxy Watch firmware prior to SMR Nov-2024 Release 1, caused by improper input validation in the BluetoothAdapter. This vulnerability allows a local attacker to trigger a local permanent denial of service on the device. Remediation is to update Galaxy Watch to SMR Nov-2024 Rele...
CVE-2024-34680
Use of implicit intent for sensitive communication in WlanTest prior to SMR Nov-2024 Release 1 allows local attackers to get sensitive information...
CVE-2024-34680
The CVE-2024-34680 issue affects Samsung Mobile’s WlanTest prior to SMR Nov-2024 Release 1, caused by the use of an implicit intent for sensitive communication. This allows a local attacker to obtain sensitive information from the device. Affected software: WlanTest (versions before SMR Nov-2024 ...