931 matches found
CVE-2023-30646
CVE-2023-30646 affects RILD, specifically the BroadcastSmsConfig component. The root cause is a heap out-of-bounds write, reported to permit attackers to execute arbitrary code. The vulnerability concerns RILD prior to Samsung Mobile SMR July-2023 Release 1; upgrading to SMR Jul-2023 Release 1 or...
CVE-2023-30646
Heap out of bound write vulnerability in BroadcastSmsConfig of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code...
CVE-2023-30645
Heap out of bound write vulnerability in IpcRxIncomingCBMsg of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code...
CVE-2023-30645
CVE-2023-30645 describes a heap out-of-bounds write in the RILD component, specifically in IpcRxIncomingCBMsg, capable of enabling arbitrary code execution. Affected software is Samsung Mobile’s RILD prior to the SMR Jul-2023 Release 1. Public sources confirm the issue and consistently recommend ...
CVE-2023-30644
Stack out of bound write vulnerability in CdmaSmsParser of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code...
CVE-2023-30644
The CVE-2023-30644 entry concerns a stack out-of-bounds write in the CdmaSmsParser of the RILD component. Affected software is Samsung’s RILD prior to SMR Jul-2023 Release 1; the vulnerability could allow attackers to execute arbitrary code locally due to an out-of-bounds write. Remediation is to...
CVE-2023-30642
Improper privilege management vulnerability in Galaxy Themes Service prior to SMR Jul-2023 Release 1 allows local attackers to call privilege function...
CVE-2023-30642
CVE-2023-30642 affects Samsung Galaxy Themes Service. The vulnerability is described as improper privilege management that allows local attackers to call privilege functions within Galaxy Themes Service prior to SMR Jul-2023 Release 1. Connected sources corroborate this issue and specify the affe...
CVE-2023-30642
Improper privilege management vulnerability in Galaxy Themes Service prior to SMR Jul-2023 Release 1 allows local attackers to call privilege function...
CVE-2023-30640
Improper access control vulnerability in PersonaManagerService prior to SMR Jul-2023 Release 1 allows local attackers to change confiugration...
CVE-2023-30640
CVE-2023-30640 affects PersonaManagerService and is caused by improper access control, enabling local attackers to change configuration. Affected versions are prior to Samsung SMR Jul-2023 Release 1; Red Hat/PRION entries corroborate the same issue. The issue is local in scope with low to moderat...
CVE-2023-21512
CVE-2023-21512 affects Samsung Knox in the notification framework, where improper Knox ID validation allows local attackers to read work profile notifications without proper access. The issue is associated with Samsung devices prior to SMR Jun-2023 Release 1. Remediation recommended by sources is...
CVE-2023-21517
Heap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows remote attacker to execute arbitrary code...
CVE-2023-21513
CVE-2023-21513 affects Samsung CC Mode prior to SMR Jun-2023 Release 1. The issue is an improper privilege management vulnerability in CC Mode that allows a physical attacker to manipulate the device into unexpected CC Mode behavior under specific conditions. Reported impact includes high confide...
CVE-2023-21502
Improper input validation vulnerability in FactoryTest application prior to SMR May-2023 Release 1 allows local attackers to get privilege escalation via debugging commands...
CVE-2023-21499
Out-of-bounds write vulnerability in TACommunicationmposencryptpin in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to execute arbitrary code...
CVE-2023-21495
Improper access control vulnerability in Knox Enrollment Service prior to SMR May-2023 Release 1 allow attacker install KSP app when device admin is set...
CVE-2023-21484
Improper access control vulnerability in AppLock prior to SMR May-2023 Release 1 allows local attackers without proper permission to execute a privileged operation...
CVE-2023-21486
Improper export of android application components vulnerability in ImagePreviewActivity in Call Settings to SMR May-2023 Release 1 allows physical attackers to access some media data stored in sandbox...
