CVE-2023-30705

Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.56.6?allows local attackers to access privileged content providers as Galaxy Store permission...

CVE-2023-30705

CVE-2023-30705 relates to the Samsung Galaxy Store prior to 4.5.56.6, where improper sanitization of incoming intents enables a local attacker to access privileged content providers using Galaxy Store permissions. Affected software: Galaxy Store versions before 4.5.56.6. Root cause: inadequate fi...

CVE-2023-30705

Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.56.6?allows local attackers to access privileged content providers as Galaxy Store permission...

CVE-2023-30700

PendingIntent hijacking vulnerability in SemWifiApTimeOutImpl in framework prior to SMR Aug-2023 Release 1 allows local attackers to access ContentProvider without proper permission...

CVE-2023-30700

PendingIntent hijacking vulnerability in SemWifiApTimeOutImpl in framework prior to SMR Aug-2023 Release 1 allows local attackers to access ContentProvider without proper permission...

CVE-2023-30700

The CVE-2023-30700 issue affects the Android/Samsung framework component SemWifiApTimeOutImpl, where a PendingIntent hijacking vulnerability could allow local attackers to access a ContentProvider without proper permission. Concrete details found in connected sources indicate affected framework v...

CVE-2023-30685

Improper access control vulnerability in Telecom prior to SMR Aug-2023 Release 1 allows local attakcers to change TTY mode...

CVE-2023-30685

CVE-2023-30685 is an improper access control vulnerability in Samsung Telecom software prior to SMR Aug-2023 Release 1 that allows a local attacker to change the TTY mode. The issue is described across multiple sources (e.g., PT-2023-22883, Red Hat advisory, NVD) as affecting Telecom components b...

CVE-2023-30684

Samsung Telecom contains an improper access control vulnerability that allows local attackers to call acceptRingingCall without permission on versions prior to SMR Aug-2023 Release 1. The issue is described across multiple sources (including PT-2023-22882) as a local-privilege concern affecting S...

CVE-2023-30683

Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call endCall API without permission...

CVE-2023-30683

Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call endCall API without permission...

CVE-2023-30682

Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call silenceRinger API without permission...

CVE-2023-30682

The CVE-2023-30682 issue affects Samsung Telecom prior to SMR Aug-2023 Release 1, caused by improper access control that allows a local attacker to call the silenceRinger API without permission. The vulnerability is pursued within Samsung’s patch track for SMR Aug-2023 Release 1, with remediation...

CVE-2023-30679

Improper access control in HDCP trustlet prior to SMR Aug-2023 Release 1 allows local attackers to execute arbitrary code...

CVE-2023-30679

Improper access control in HDCP trustlet prior to SMR Aug-2023 Release 1 allows local attackers to execute arbitrary code...

PT-2023-22876 · Unknown · Hdcp Trustlet

Name of the Vulnerable Software and Affected Versions: HDCP trustlet versions prior to SMR Aug-2023 Release 1 Description: The issue is related to improper access control in the HDCP trustlet, allowing local attackers to execute arbitrary code. This could potentially lead to security breaches...

PT-2023-22880 · Telecom · Telecom

Name of the Vulnerable Software and Affected Versions: Telecom versions prior to SMR Aug-2023 Release 1 Description: The issue is related to improper access control, allowing local attackers to call the "silenceRinger API" without permission. Recommendations: For versions prior to SMR Aug-2023...

CVE-2023-4273 Kernel: exfat: stack overflow in exfat_get_uniname_from_ext_entry

A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation of the file name reconstruction function, which is responsible for reading file name entries from a directory index and merging file name parts belonging to one file into a single long file...

CVE-2023-38633

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files on the local filesystem outside of the expected area, as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element...

Directory traversal

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files on the local filesystem outside of the expected area, as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element...