CVE-2022-25817

Samsung One UI Home (pre–SMR Mar‑2022 Release 1) is affected by CVE-2022-25817 due to improper authentication, allowing an attacker to generate pinned shortcuts without user consent. Remediation: update to SMR Mar‑2022 Release 1 or later.

CVE-2022-25816

Improper authentication in Samsung Lock and mask apps setting prior to SMR Mar-2022 Release 1 allows attacker to change enable/disable without authentication...

CVE-2022-25816

CVE-2022-25816 affects Samsung Lock and Mask apps setting prior to the SMR Mar-2022 Release 1, where improper authentication allows an attacker to change enable/disable without authentication. The initial entry documents this vulnerability and notes Samsung and Red Hat/other vendor advisories ali...

CVE-2022-25815

PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent...

CVE-2022-25814

PendingIntent hijacking vulnerability in Wearable Manager Installer prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent...

CVE-2022-25814

The CVE-2022-25814 entry describes a local PendingIntent hijacking flaw in Wearable Manager Installer (Android) prior to Samsung SMR Mar-2022 Release 1. Root cause: hijack of PendingIntent to cause unauthorized actions without permission. Affected component: Wearable Manager Installer. Impact per...

CVE-2022-24932

The CVE-2022-24932 entry concerns Samsung Setup wizard: an Improper Protection of Alternate Path vulnerability in the Setup wizard process allows a physical attacker to install packages before the wizard completes. Affected versions are Setup wizard versions prior to SMR Mar-2022 Release 1. The u...

CVE-2022-24931

The CVE-2022-24931 entry pertains to Samsung ApkInstaller’s dynamic receiver with improper access control. Connected sources (PT-2022-16993) confirm the root cause as lack of proper permission enforcement, allowing unauthorized attackers to execute arbitrary activities on affected ApkInstaller ve...

CVE-2022-24930

An Improper access control vulnerability in StRetailModeReceiver in Wear OS 3.0 prior to Firmware update MAR-2022 Release allows untrusted applications to reset default app settings without a proper permission...

CVE-2022-24929

Unprotected Activity in AppLock prior to SMR Mar-2022 Release 1 allows attacker to change the list of locked app without authentication...

CVE-2022-24928

CVE-2022-24928 describes a security misconfiguration in Samsung’s RKP (kernel protection) mechanism prior to the SMR Mar-2022 Release 1. The root cause is a misconfiguration that leaves the system not protected by RKP. As a result, confidentiality, integrity, and availability can be affected on a...

CVE-2022-24928

Security misconfiguration of RKP in kernel prior to SMR Mar-2022 Release 1 allows a system not to be protected by RKP...

McAfee Active Response 安全漏洞

Mcafee McAfee Active Response MAR is an endpoint detection and response tool for security threats from McAfee USA. The product supports features such as quick access to threat data, threat alerts, and centralized management. A security vulnerability exists in McAfee Active Response that originate...

CVE-2021-25371

A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP...

CVE-2021-25370

An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic...

CVE-2021-25372

An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access...

Improper access control

An improper access control vulnerability in seclog file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace...

Design/Logic Flaw

An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access...

Memory corruption

An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic...

CVE-2021-25372

CVE-2021-25372 describes an improper boundary check in the Samsung mobile DSP driver, causing out-of-bounds memory access. Affected: Samsung mobile devices with the DSP driver (prior to SMR Mar-2021 Release 1). Root cause: boundary check weakness leading to out-of-bounds reads/writes. Impact per ...