CVE-2016-11031

An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, and M6.0 software. AntService allows a systemserver crash and reboot. The Samsung ID is SVE-2016-7044 November 2016...

CVE-2016-11027

An issue was discovered on Samsung mobile devices with M6.0 software. In the Shade Locked state, a physically proximate attacker can read notifications on the lock screen. The Samsung ID is SVE-2016-7132 December 2016...

CVE-2017-18690

CVE-2017-18690 involves a buffer overflow in the sensor hub of certain Samsung mobile devices. Affected platforms include KK (4.4), L (5.0/5.1), M (6.0), and N (7.0) with Exynos54xx, Exynos7420, Exynos8890, or Exynos8895 chipsets. The available public description notes a sensor-hub buffer overflo...

CVE-2016-11033

An issue was discovered on Samsung mobile devices with M6.0 software. There is a heap-based buffer overflow in tlcserver. The Samsung IDs are SVE-2016-7220 and SVE-2016-7225 November 2016...

CVE-2016-11033

CVE-2016-11033 affects Samsung mobile devices running M(6.0). Affected component is tlc_server, with a heap-based buffer overflow as the root cause. Samsung IDs: SVE-2016-7220 and SVE-2016-7225. Impact and exploitability are described in the linked metrics (CVSS v2/base 7.5 HIGH; CVSS v3.1/base 9...

CVE-2016-11034

CVE-2016-11034 affects Samsung mobile devices running L/5.0–5.1 and M/6.0 where the decode function in Qjpeg (Qt 5.7) can trigger a system crash via a malformed image. Root cause: improper handling in Qjpeg decoding. Affected component: Qt 5.7 Qjpeg on Samsung devices (SVE-2016-6560). Impact: sys...

CVE-2016-11036

An issue was discovered on Samsung mobile devices with M6.0 software. There is a Factory Reset Protection FRP bypass. The Samsung ID is SVE-2016-6008 August 2016...

CVE-2016-11042

An issue was discovered on Samsung mobile devices with L5.0/5.1 and M6.0 software. There is a SIM Lock bypass. The Samsung ID is SVE-2016-5381 June 2016...

CVE-2016-11043

An issue was discovered on Samsung mobile devices with M6.0 software. The S/MIME implementation in EAS uses DES where 3DES is intended. The Samsung ID is SVE-2016-5871 June 2016...

CVE-2016-11043

Affected product: Samsung mobile devices running M(6.0) software. Issue: S/MIME in EAS uses DES instead of the intended 3DES, enabling weaker cryptographic protection. Documented as Samsung ID SVE-2016-5871 (June 2016). Impact per sources: design weakness in encryption; CVSS notes indicate higher...

m.27dress.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1135308 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting m.27dress.com website and...

m-harrison.org Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1134724 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

m.100homemade.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1134025 Security Researcher Hchabik Helped patch 2358 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting m.100homemade.com website a...

m-butterfly.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1131912 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting m-butterfly.ru website and...

m-perspektiven.de Cross Site Scripting vulnerability

Security Researcher bill Helped patch 52 vulnerabilities Received 2 Coordinated Disclosure badges Received 2 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting m-perspektiven.de website and its users. Following coordinated a...

CVE-2020-0069

In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

Stack overflow

Stack overflow can occur when SDP is received with multiple payload types in the FMTP attribute of a video M line in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ800...

The vulnerability of the ECDSA algorithm implementation in STMicroelectronics ST33 microprogrammable TPM processors allows a hacker to restore the values of secret keys stored in the TPM (Trusted Platform Module).

The vulnerability of the ECDSA algorithm implementation in STMicroelectronics ST33 microprogrammable TPM processors is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to retrieve the values of secret keys...

m-g-t.ru Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1090451 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

D-Link DIR-859 ssdpcgi() M-SEARCH arbitrary command execution vulnerability (CNVD-2020-13689)

The D-Link DIR-859 is a router device. A security vulnerability exists in the D-Link DIR-859 ssdpcgi M-SEARCH method handling, which can be exploited by remote attackers to submit a special request to execute arbitrary commands...