CVE-2024-20833

Use after free vulnerability in pubcryptorecvmsg prior to SMR Mar-2024 Release 1 due to race condition allows local attackers with system privilege to cause memory corruption...

Information disclosure

The sensitive information exposure vulnerability in WlanTest prior to SMR Mar-2024 Release 1 allows local attackers to access MAC address without proper permission...

Heap overflow

Heap overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows a privileged attacker to execute arbitrary code...

CVE-2024-20836

Out of bounds Read vulnerability in ssmisgetfrm in libsubextractor.so prior to SMR Mar-2024 Release 1 allows local attackers to read out of bounds memory...

CVE-2024-20835

CVE-2024-20835 concerns CustomFrequencyManagerService with an improper access-control vulnerability. Multiple connected sources (Red Hat, PT Security, CVE databases) confirm the issue affects CustomFrequencyManagerService prior to the Samsung SMR Mar-2024 Release 1, enabling local attackers to ex...

CVE-2024-20834

CVE-2024-20834 affects the WlanTest module in Samsung mobile environments. Affected: WlanTest versions prior to SMR Mar-2024 Release 1. Issue: sensitive information exposure enables local attackers to access the MAC address without permission. Impact: local disclosure of a low-integrity, low-avai...

CVE-2024-20832

The CVE-2024-20832 entry concerns the Little Kernel bootloader heap overflow in Samsung devices. Affected component: Little Kernel in the bootloader; root cause: heap overflow prior to SMR Mar-2024 Release 1. Impact: local privileged attackers can execute arbitrary code. Public exploitation detai...

CVE-2024-20831

CVE-2024-20831 describes a stack overflow in the Little Kernel bootloader. The vulnerability is exploitable locally to gain privileged code execution via the bootloader on versions prior to SMR Mar-2024 Release 1. Remediation per provided documents is to update to SMR Mar-2024 Release 1 or later;...

CVE-2024-20831

Stack overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows local privileged attackers to execute arbitrary code...