CVE-2024-20864

Improper access control vulnerability in DarManagerService prior to SMR May-2024 Release 1 allows local attackers to monitor system resources...

CVE-2024-20864

Improper access control vulnerability in DarManagerService prior to SMR May-2024 Release 1 allows local attackers to monitor system resources...

CVE-2024-20863

Out of bounds write vulnerability in SNAP in HAL prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code...

CVE-2024-20863

SNAP in HAL is affected (prior to SMR May-2024 Release 1) by an out-of-bounds write vulnerability that allows local privileged attackers to execute arbitrary code. The issue is evidenced by PT-2024-18774 and corroborated by multiple sources referencing the HAL SNAP exposure and the same impact. R...

CVE-2024-20861

CVE-2024-20861 is a use-after-free vulnerability in SveService on Samsung Mobile devices before SMR May-2024 Release 1, enabling local privileged attackers to cause memory corruption. Affected component: SveService; root cause: use-after-free. Impact per sources: local privilege escalation with p...

CVE-2024-20860

Improper export of android application components vulnerability in TelephonyUI prior to SMR May-2024 Release 1 allows local attackers to reboot the device without proper permission...

CVE-2024-20860

Improper export of android application components vulnerability in TelephonyUI prior to SMR May-2024 Release 1 allows local attackers to reboot the device without proper permission...

CVE-2024-20860

Summary of CVE-2024-20860 : An improper export of Android application components vulnerability in TelephonyUI affects Samsung mobile devices. The root cause is mis-export of components within TelephonyUI, enabling local attackers to reboot the device without proper permission. The vulnerability i...

CVE-2024-20859

Improper access control vulnerability in FactoryCamera prior to SMR May-2024 Release 1 allows local attackers to take pictures without privilege...

CVE-2024-20859

CVE-2024-20859 concerns Samsung FactoryCamera on Samsung Mobile devices prior to SMR May-2024 Release 1. The root cause is improper access control, enabling local attackers to take pictures without privileges. Impact is local access to camera output with elevated risk to sensitive information. Re...

CVE-2024-20859

Improper access control vulnerability in FactoryCamera prior to SMR May-2024 Release 1 allows local attackers to take pictures without privilege...

CVE-2024-20858

Improper access control vulnerability in setCocktailHostCallbacks of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to access information of current application...

CVE-2024-20857

CVE-2024-20857 affects CocktailBarService: startListening exposes information due to improper access control, with affected versions prior to SMR May-2024 Release 1. Exploitation details are not provided in the documents. PT-Security lists a workaround to disable startListening as a temporary mea...

CVE-2024-20857

Improper access control vulnerability in startListening of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to access information of current application...

CVE-2024-20821

CVE-2024-20821 affects Samsung Exynos SoCs (e.g., Exynos1380, Exynos1330, Exynos2400) where a vulnerability allows a local attacker to reconfigure OTP and transit into RMA mode, disabling security features. The underlying issue is a reconfigurable OTP that requires an additional privilege to cont...

PT-2024-18775 · Unknown · Darmanagerservice

Name of the Vulnerable Software and Affected Versions: DarManagerService versions prior to SMR May-2024 Release 1 Description: The issue is related to improper access control in DarManagerService, allowing local attackers to monitor system resources. Recommendations: For versions prior to SMR...

Samsung Email 安全漏洞

SAMSUNG Email is an email application from the South Korean company Samsung SAMSUNG. It enables users to seamlessly manage multiple personal and business email accounts. A security vulnerability previously existed in Samsung Email version 6.1.91.14, which stemmed from the presence of an improper...

PT-2024-18783 · Google · Talkbackse

Name of the Vulnerable Software and Affected Versions: TalkbackSE versions prior to Android 14 Description: The issue is related to improper handling of insufficient privileges, allowing local attackers to modify the setting value of TalkbackSE. This can be exploited by local attackers...

Samsung Internet 安全漏洞

SAMSUNG Internet is a cell phone application from the South Korean company Samsung SAMSUNG. It provides a browser function. A security vulnerability previously existed in Samsung Internet version 25.0.0.41, which stemmed from an improper privilege management vulnerability that allowed a local...

PT-2024-18769 · Unknown · Factorycamera

Name of the Vulnerable Software and Affected Versions: FactoryCamera versions prior to SMR May-2024 Release 1 Description: The issue is related to improper access control, allowing local attackers to take pictures without the necessary privileges. This could potentially lead to unauthorized acces...