CVE-2024-34585

CVE-2024-34585 concerns improper access control in the Samsung Mobile SystemUI component, specifically the launchApp function. The vulnerability allows a local attacker to launch privileged activities due to insufficient access restrictions in SystemUI before the SMR Jul-2024 Release 1. The relat...

CVE-2024-34584

...

CVE-2024-34583

Improper access control in system property prior to SMR Jul-2024 Release 1 allows local attackers to get device identifier...

CVE-2024-20901

Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2024-20900

Improper authentication in MTP application prior to SMR Jul-2024 Release 1 allows local attackers to enter MTP mode without proper authentication...

CVE-2024-20899

CVE-2024-20899 affects Samsung Mobile devices (IMS service, RCS function). The vulnerability stems from the use of implicit intents for sensitive communication in the RCS function, enabling local attackers to obtain sensitive information. Impact is described as local access with confidentiality e...

CVE-2024-20898

Use of implicit intent for sensitive communication in SoftphoneClient in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information...

CVE-2024-20897

Use of implicit intent for sensitive communication in FCM function in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information...

CVE-2024-20897

CVE-2024-20897 affects the FCM function in Samsung IMS service (pre-SMR Jul-2024 Release 1). The root cause is use of implicit intents for sensitive communications, enabling local attackers to obtain sensitive information. Impact is described as local access leading to information disclosure. Rem...

CVE-2024-20897

Use of implicit intent for sensitive communication in FCM function in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information...

CVE-2024-20896

Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information...

CVE-2024-20895

Improper access control in Dar service prior to SMR Jul-2024 Release 1 allows local attackers to bypass restriction for calling SDP features...

CVE-2024-20893

Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows local attackers to trigger memory corruption...

CVE-2024-20893

Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows local attackers to trigger memory corruption...

CVE-2024-20891

Improper access control in launchFullscreenIntent of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities...

CVE-2024-20890

Improper input validation in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to trigger abnormal behavior...

PT-2024-18801 · Unknown · Bluetooth Low Energy

Name of the Vulnerable Software and Affected Versions: Bluetooth Low Energy BLE versions prior to SMR Jul-2024 Release 1 Description: The issue is related to improper authentication in BLE, allowing adjacent attackers to pair with devices. This could potentially lead to unauthorized access...

PT-2024-18808 · Unknown · Dar Service

Name of the Vulnerable Software and Affected Versions: Dar service versions prior to SMR Jul-2024 Release 1 Description: The issue is related to improper access control in the Dar service, allowing local attackers to bypass restrictions for calling SDP features. Recommendations: For versions prio...

PT-2024-18811 · Unknown · Softphoneclient

Name of the Vulnerable Software and Affected Versions: SoftphoneClient in IMS service versions prior to SMR Jul-2024 Release 1 Description: The issue allows local attackers to obtain sensitive information due to the use of implicit intent for sensitive communication in the SoftphoneClient...

PT-2024-18810 · Ims · Ims

Name of the Vulnerable Software and Affected Versions: FCM function in IMS service versions prior to SMR Jul-2024 Release 1 Description: The issue concerns the use of implicit intent for sensitive communication in the FCM function within the IMS service, allowing local attackers to obtain sensiti...