CVE-2023-21459

Use after free vulnerability in decon driver prior to SMR Mar-2023 Release 1 allows attackers to cause memory access fault...

CVE-2023-21458

Improper privilege management vulnerability in PhoneStatusBarPolicy in System UI prior to SMR Mar-2023 Release 1 allows attacker to turn off Do not disturb via unprotected intent...

CVE-2023-21460

Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting...

CVE-2023-21454

Improper authorization in Samsung Keyboard prior to SMR Mar-2023 Release 1 allows physical attacker to access users text history on the lockscreen...

PT-2023-18227 · Unknown · Decon Driver

Name of the Vulnerable Software and Affected Versions: decon driver versions prior to SMR Mar-2023 Release 1 Description: The issue is related to a use after free vulnerability in the decon driver, which allows attackers to cause a memory access fault. Recommendations: For versions prior to SMR...

CVE-2023-21452

Improper usage of implicit intent in Bluetooth prior to SMR Mar-2023 Release 1 allows attacker to get MAC address of connected device...

CVE-2023-21459

CVE-2023-21459 is a use-after-free vulnerability in the Samsung decon driver, pre-SMR Mar-2023 Release 1. The issue enables memory access faults due to a post-release reuse of resources in the decon driver. Affected component: decon driver (Samsung mobile devices). Impact is described as memory a...

CVE-2023-21449

Improper access control vulnerability in Call application prior to SMR Mar-2023 Release 1 allows local attackers to access sensitive information without proper permission...

CVE-2023-21449

The CVE-2023-21449 entry concerns the Samsung Call application with improper access control, enabling local attackers to access sensitive information without permission. Affected component is the Call application (prior to SMR Mar-2023 Release 1); root cause is improper access control. Public det...

CVE-2023-21461

The CVE-2023-21461 entry concerns Samsung mobile devices with an improper authorization vulnerability in the Settings component AutoPowerOnOffConfirmDialog (before SMR Mar-2023 Release 1). The underlying issue allows a local attacker to turn the device off via an unprotected activity. Documented ...

CVE-2023-21459

Use after free vulnerability in decon driver prior to SMR Mar-2023 Release 1 allows attackers to cause memory access fault...

CVE-2023-21455

CVE-2023-21455 affects Exynos baseband prior to SMR Mar-2023 Release 1. The root cause is improper authorization implementation, causing incorrect handling of unencrypted messages. CVSS metrics indicate high impact on confidentiality and integrity (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) with the ex...

CVE-2023-21458

Improper privilege management vulnerability in PhoneStatusBarPolicy in System UI prior to SMR Mar-2023 Release 1 allows attacker to turn off Do not disturb via unprotected intent...

CVE-2023-21458

CVE-2023-21458 involves an improper privilege management in Samsung System UI’s PhoneStatusBarPolicy. This vulnerability affects System UI versions prior to SMR Mar-2023 Release 1, where an attacker could turn off Do Not Disturb via an unprotected intent. The issue is base on local access with lo...

CVE-2023-21453

The CVE-2023-21453 issue affects SoftSim TA prior to SMR Mar-2023 Release 1. Root cause: improper input validation in SoftSim TA, enabling local attackers to access protected data. Affected component: SoftSim TA (pre-Release 1). Impact: unauthorized data access with local attack vector; publicati...

CVE-2023-21460

CVE-2023-21460 concerns Samsung SecSettings with improper authentication prior to SMR Mar-2023 Release 1. The vulnerability enables an attacker with local access to reset the SecSettings configuration. The issue is described consistently across sources as a failure of authentication in SecSetting...