CVE-2023-30689

CVE-2023-30689 affects Samsung Mobile devices, caused by an out-of-bounds write in libsec-ril’s BuildOemEmbmsGetSigStrengthResponse. A local attacker can trigger arbitrary code execution. Samsung fixed this in SMR Aug-2023 Release 1; update devices via the Samsung security bulletin. Exploitation ...

CVE-2023-30688

Out-of-bounds Write in MakeUiccAuthForOem of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code...

CVE-2023-30688

The CVE-2023-30688 entry covers an out-of-bounds write in MakeUiccAuthForOem of libsec-ril, reported for Samsung Mobile devices in the SMR Aug-2023 Release 1. The issue enables a local attacker to execute arbitrary code. Public references in the provided documents identify the affected component ...

CVE-2023-30687

Out-of-bounds Write in RmtUimApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code...

CVE-2023-30687

Out-of-bounds Write in RmtUimApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code...

CVE-2023-30686

Out-of-bounds Write in ReqDataRaw of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code...

CVE-2023-30686

Out-of-bounds Write in ReqDataRaw of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code...

CVE-2023-30686

CVE-2023-30686 describes an out-of-bounds write in ReqDataRaw within libsec-ril, affecting Samsung Mobile devices prior to SMR Aug-2023 Release 1. The issue permits a local attacker with low privileges and no user interaction to potentially execute arbitrary code, with impact on confidentiality, ...

CVE-2023-30685

CVE-2023-30685 is an improper access control vulnerability in Samsung Telecom software prior to SMR Aug-2023 Release 1 that allows a local attacker to change the TTY mode. The issue is described across multiple sources (e.g., PT-2023-22883, Red Hat advisory, NVD) as affecting Telecom components b...

CVE-2023-30684

Improper access control in Samsung Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call acceptRingingCall API without permission...

CVE-2023-30683

Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call endCall API without permission...

CVE-2023-30683

Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call endCall API without permission...

CVE-2023-30682

Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call silenceRinger API without permission...

CVE-2023-30682

Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call silenceRinger API without permission...

CVE-2023-30682

The CVE-2023-30682 issue affects Samsung Telecom prior to SMR Aug-2023 Release 1, caused by improper access control that allows a local attacker to call the silenceRinger API without permission. The vulnerability is pursued within Samsung’s patch track for SMR Aug-2023 Release 1, with remediation...

CVE-2023-30681

An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write...

CVE-2023-30681

An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write...

CVE-2023-30680

CVE-2023-30680 affects Samsung MMIGroup before the SMR Aug-2023 Release 1. Root cause: improper privilege management allowing code execution with elevated privileges. Impact: local attacker could achieve total compromise of confidentiality, integrity, and availability. Affected: MMIGroup software...

CVE-2023-30679

Improper access control in HDCP trustlet prior to SMR Aug-2023 Release 1 allows local attackers to execute arbitrary code...

CVE-2023-30654

CVE-2023-30654 concerns Samsung Mobile devices and targets the SLocationService race for location data. The vulnerability is an improper access control in SLocationService prior to the SMR Aug-2023 Release 1, which allows a local attacker to update a fake location. The documented impact indicates...