339 matches found
Input validation
Improper input validation vulnerability in SoftSim TA prior to SMR Mar-2023 Release 1 allows local attackers access to protected data...
Authorization
Improper authorization vulnerability in AutoPowerOnOffConfirmDialog in Settings prior to SMR Mar-2023 Release 1 allows local attacker to turn device off via unprotected activity...
Design/Logic Flaw
Improper usage of implicit intent in Bluetooth prior to SMR Mar-2023 Release 1 allows attacker to get MAC address of connected device...
Authorization
Improper authorization implementation in Exynos baseband prior to SMR Mar-2023 Release 1 allows incorrect handling of unencrypted message...
CVE-2023-21455
CVE-2023-21455 affects Exynos baseband prior to SMR Mar-2023 Release 1. The root cause is improper authorization implementation, causing incorrect handling of unencrypted messages. CVSS metrics indicate high impact on confidentiality and integrity (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) with the ex...
CVE-2023-21461
The CVE-2023-21461 entry concerns Samsung mobile devices with an improper authorization vulnerability in the Settings component AutoPowerOnOffConfirmDialog (before SMR Mar-2023 Release 1). The underlying issue allows a local attacker to turn the device off via an unprotected activity. Documented ...
CVE-2023-21460
Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting...
CVE-2023-21460
CVE-2023-21460 concerns Samsung SecSettings with improper authentication prior to SMR Mar-2023 Release 1. The vulnerability enables an attacker with local access to reset the SecSettings configuration. The issue is described consistently across sources as a failure of authentication in SecSetting...
CVE-2023-21449
Improper access control vulnerability in Call application prior to SMR Mar-2023 Release 1 allows local attackers to access sensitive information without proper permission...
CVE-2023-21454
CVE-2023-21454 affects Samsung Keyboard prior to SMR Mar-2023 Release 1. The issue is improper authorization that could let a physical attacker access a user’s text history on the lockscreen. Affected software: Samsung Keyboard; root cause: improper authorization. Impact described as exposure of ...
CVE-2023-21453
The CVE-2023-21453 issue affects SoftSim TA prior to SMR Mar-2023 Release 1. Root cause: improper input validation in SoftSim TA, enabling local attackers to access protected data. Affected component: SoftSim TA (pre-Release 1). Impact: unauthorized data access with local attack vector; publicati...
CVE-2023-21452
Improper usage of implicit intent in Bluetooth prior to SMR Mar-2023 Release 1 allows attacker to get MAC address of connected device...
CVE-2023-21459
Use after free vulnerability in decon driver prior to SMR Mar-2023 Release 1 allows attackers to cause memory access fault...
CVE-2023-21458
Improper privilege management vulnerability in PhoneStatusBarPolicy in System UI prior to SMR Mar-2023 Release 1 allows attacker to turn off Do not disturb via unprotected intent...
PT-2023-18227 · Unknown · Decon Driver
Name of the Vulnerable Software and Affected Versions: decon driver versions prior to SMR Mar-2023 Release 1 Description: The issue is related to a use after free vulnerability in the decon driver, which allows attackers to cause a memory access fault. Recommendations: For versions prior to SMR...
CVE-2023-21449
The CVE-2023-21449 entry concerns the Samsung Call application with improper access control, enabling local attackers to access sensitive information without permission. Affected component is the Call application (prior to SMR Mar-2023 Release 1); root cause is improper access control. Public det...
CVE-2023-21459
CVE-2023-21459 is a use-after-free vulnerability in the Samsung decon driver, pre-SMR Mar-2023 Release 1. The issue enables memory access faults due to a post-release reuse of resources in the decon driver. Affected component: decon driver (Samsung mobile devices). Impact is described as memory a...
CVE-2023-21452
CVE-2023-21452 concerns Samsung Mobile Bluetooth prior to SMR Mar-2023 Release 1, due to improper usage of implicit intent that enables an attacker to obtain the MAC address of a connected device. Affected software/hardware: Samsung mobile devices with Bluetooth before SMR Mar-2023 Release 1. Roo...