Buffer overflow

Out-of-bounds Write vulnerabilities in svc1tdvldplhap of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow...

Buffer overflow

Out-of-bounds Write vulnerabilities in svc1tdvldelh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow...

Information disclosure

Implicit intent hijacking vulnerability in IAP of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent...

Input validation

Improper input validation in bootloader prior to SMR Feb-2024 Release 1 allows attacker to cause an Out-Of-Bounds read...

Information disclosure

Implicit intent hijacking vulnerability in UPHelper library prior to version 4.0.0 allows local attackers to access sensitive information via implicit intent...

Input validation

Improper caller verification in GameOptimizer prior to SMR Feb-2024 Release 1 allows local attackers to configure GameOptimizer...

Information disclosure

Implicit intent hijacking vulnerability in VoiceSearch of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent...

Authorization

Improper authorization verification vulnerability in Samsung Internet prior to version 24.0 allows physical attackers to access files downloaded in SecretMode without proper authentication...

Buffer overflow

Out-of-bounds Write vulnerabilities in svc1tdvldslh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow...

CVE-2024-20827

Summary: Samsung Gallery vulnerable to improper access control, enabling physical attackers to view pictures on the lockscreen via a physical keyboard. Affected software: Samsung Gallery, versions prior to 14.5.04.4. Root cause: improper access control, leading to confidentiality impact (C:H) per...

CVE-2024-20826

CVE-2024-20826 involves an implicit intent hijacking vulnerability in the UPHelper library prior to version 4.0.0. The provided documents consistently state that local attackers can access sensitive information via implicit intents. Details on affected products, precise root cause, exploit scenar...

CVE-2024-20824

CVE-2024-20824 affects Galaxy Store's VoiceSearch. Affected: Galaxy Store versions before 4.5.63.6. Issue: implicit intent hijacking allowing a local attacker to access sensitive information via VoiceSearch. Impact: confidentiality impact reported as High; no integrity or availability impact stat...

CVE-2024-20822

CVE-2024-20822 describes an implicit intent hijacking vulnerability in Galaxy Store’s AccountActivity prior to version 4.5.63.6. Local attackers could access sensitive information via implicit intents. Public details across sources confirm the affected component and version window, but no explici...

CVE-2024-20820

The CVE-2024-20820 entry refers to improper input validation in the bootloader of Samsung mobile devices, allowing local privileged attackers to trigger an out-of-bounds read. Affected software is the bootloader prior to SMR Feb-2024 Release 1. Documented impact includes confidentiality and avail...

CVE-2024-20817

CVE-2024-20817 affects Samsung Mobile devices via the vulnerable libsthmbc.so component: the function svc1td_vld_slh suffers an out-of-bounds write vulnerability. The issue exists in versions prior to the SMR Feb-2024 Release 1 and can allow a local attacker to trigger a buffer overflow. The conn...

CVE-2024-20816

CVE-2024-20816 involves an improper authentication vulnerability in Samsung Auto Hotspot’s onCharacteristicWriteRequest. The issue allows adjacent attackers to connect to a victim’s mobile hotspot without user awareness. Root cause: insufficient authentication checks on the public interface used ...

CVE-2024-20815

The CVE-2024-20815 affects Auto Hotspot’s onCharacteristicReadRequest. Multiple authoritative sources (including PT-Security PT-2024-18722) describe an improper authentication vulnerability that lets adjacent attackers connect to a victim’s hotspot without user awareness. The issue is tied to Aut...

CVE-2024-20813

CVE-2024-20813 is an Out-of-bounds write in padmd_vld_qtbl, within the libpadm.so component. The vulnerability affects libpadm.so prior to the Samsung SMR Feb-2024 Release 1, enabling a local attacker to execute arbitrary code via the padmd_vld_qtbl path. The issue is confirmed in multiple source...

CVE-2024-20812

CVE-2024-20812 affects Samsung Mobile devices via an out-of-bounds write in padmd_vld_htbl within libpadm.so. The flaw (padmd_vld_htbl in libpadm.so) enables a local attacker to execute arbitrary code. Root cause described as out-of-bounds write. Impact is local code execution with high potential...

CVE-2024-20811

CVE-2024-20811 concerns Samsung Mobile’s GameOptimizer . The root cause is improper caller verification , enabling a local attacker to configure GameOptimizer. Affected are Samsung devices with the GameOptimizer component prior to the SMR Feb-2024 Release 1. The entry notes local access from an u...