Input validation

Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to read arbitrary files with system privilege...

Improper access control

Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass restrictions on starting activities from the background...

Cross site scripting

Out-of-bounds Write in readblock of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code...

Improper access control

Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct without User Interaction...

Input validation

An improper input validation in getheadcrc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write...

Input validation

Improper Certificate Validation in FotaAgent prior to SMR Nov-2023 Release1 allows remote attacker to intercept the network traffic including Firmware information...

CVE-2023-42538

The CVE-2023-42538 entry concerns the libsaped library (libsaped) with an issue in the saped_rec_silence function (often referred to as the saped rec silence function). The root cause is improper input validation, enabling local attackers to trigger an out-of-bounds read and write. Affected versi...

CVE-2023-42537

An improper input validation in getheadcrc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write...

CVE-2023-42537

The CVE-2023-42537 issue affects/libsaped, specifically the function get_head_crc. The vulnerability stems from improper input validation, enabling a local attacker to cause out-of-bounds reads and writes before the SMR Nov-2023 Release 1. The affected component is the get_head_crc routine in lib...

CVE-2023-42536

The CVE-2023-42536 issue affects libsaped’s saped_dec component in Samsung Libsaped, with versions prior to the SMR Nov-2023 Release 1 being vulnerable. The root cause is improper input validation in saped_dec, enabling local attackers to trigger an out-of-bounds read and write, potentially compr...

CVE-2023-42536

An improper input validation in sapeddec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write...

CVE-2023-42535

Out-of-bounds Write in readblock of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code...

CVE-2023-42535

Out-of-bounds Write in readblock of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code...

CVE-2023-42535

CVE-2023-42535 affects Samsung Mobile devices via an out-of-bounds write in the vold module’s read_block function, enabling a local attacker to execute arbitrary code. The issue is tied to Samsung’s pre-SMR Nov-2023 Release 1 patch level, with multiple sources confirming a local-exploit scenario ...

CVE-2023-42534

CVE-2023-42534 affects Samsung Mobile devices via the ChooserActivity module, where improper input validation allows a local attacker to read arbitrary files with system privileges. The issue is documented as present prior to SMR Nov-2023 Release 1. The vulnerability is addressed by Samsung’s sec...

CVE-2023-42534

Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to read arbitrary files with system privilege...

CVE-2023-42534

Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to read arbitrary files with system privilege...

CVE-2023-42532

Improper Certificate Validation in FotaAgent prior to SMR Nov-2023 Release1 allows remote attacker to intercept the network traffic including Firmware information...

CVE-2023-42532

Improper Certificate Validation in FotaAgent prior to SMR Nov-2023 Release1 allows remote attacker to intercept the network traffic including Firmware information...

CVE-2023-42531

CVE-2023-42531 concerns an improper access control in the SmsController prior to SMR Nov-2023 Release1. The vulnerability allows local attackers to bypass restrictions on starting activities from the background. Affected component: SmsController (Samsung Mobile/Samsung SMR release lineage). Root ...