929 matches found
CVE-2023-30658
The CVE-2023-30658 issue affects the DataProfile module in Samsung devices (SMR Jul-2023 Release 1). Root cause: improper input validation, enabling a local attacker to perform privileged activities. Impact is described as high, with local attack vector and privileges required as low, no user int...
CVE-2023-30658
Improper input validation vulnerability in DataProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...
CVE-2023-30657
Improper input validation vulnerability in EnhancedAttestationResult prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...
CVE-2023-30657
Improper input validation vulnerability in EnhancedAttestationResult prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...
CVE-2023-30657
The CVE-2023-30657 issue affects Samsung EnhancedAttestationResult and is caused by improper input validation. The vulnerability allows local attackers to execute privileged activities on affected devices. Samsung’s documentation indicates the vulnerability was addressed in the SMR Jul-2023 Relea...
CVE-2023-30656
CVE-2023-30656 concerns LSOItemData with an improper input validation flaw that could allow an attacker to launch certain activities. Technical details in connected documents identify LSOItemData as affected, with impact tied to improper input validation and a requirement that vulnerable versions...
CVE-2023-30655
CVE-2023-30655 is a vulnerability in Samsung SMR Jul-2023 Release 1 that affects the SCEPProfile module. It is caused by improper input validation in SCEPProfile, enabling local attackers to launch privileged activities. Connected documents identify the affected product scope as Samsung mobile de...
CVE-2023-30653
Out of bounds read and write in enableTspDevice of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code...
CVE-2023-30652
Out of bounds read and write in callrunTspCmdNoRead of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code...
CVE-2023-30652
CVE-2023-30652 affects Samsung mobile devices’ sysinput HAL service (pre-SMR Jul-2023 Release 1). It is an out-of-bounds read/write vulnerability in callrunTspCmdNoRead that enables local attackers to execute arbitrary code. Impact is supported by NVD/Red Hat/NCSC advisories; CVSS v3.1 vectors in...
CVE-2023-30651
Out of bounds read and write in callgetTspsysfs of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code...
CVE-2023-30650
The CVE-2023-30650 issue affects Samsung Mobile devices and is described as an out-of-bounds read/write in callrunTspCmd within the sysinput HAL service. The root cause is an overrun in the HAL call that can enable local attackers to execute arbitrary code. Affected component is the sysinput HAL,...
CVE-2023-30650
Out of bounds read and write in callrunTspCmd of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code...
CVE-2023-30649
Heap out of bound write vulnerability in RmtUimNeedApdu of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code...
CVE-2023-30649
Heap out of bound write vulnerability in RmtUimNeedApdu of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code...
CVE-2023-30649
CVE-2023-30649 affects Samsung RILD (RmtUimNeedApdu) with a heap out-of-bounds write that allows arbitrary code execution. In the PT-2023-22843 advisory, impacted versions are RILD prior to SMR Jul-2023 Release 1. The issue originates from a heap out-of-bounds write in the RmtUimNeedApdu function...
CVE-2023-30647
Heap out of bound write vulnerability in IpcRxUsimPhoneBookCapa of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code...
CVE-2023-30647
CVE-2023-30647 is a heap out-of-bounds write vulnerability in the RILD component, specifically in the IpcRxUsimPhoneBookCapa path. It affects RILD prior to SMR Jul-2023 Release 1 and is described as allowing attackers to execute arbitrary code. Remediation per PT-2023-22841 is to update to SMR Ju...
CVE-2023-30646
CVE-2023-30646 affects RILD, specifically the BroadcastSmsConfig component. The root cause is a heap out-of-bounds write, reported to permit attackers to execute arbitrary code. The vulnerability concerns RILD prior to Samsung Mobile SMR July-2023 Release 1; upgrading to SMR Jul-2023 Release 1 or...