929 matches found
CVE-2024-34588
Improper input validation혻in parsing RTCP SR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability...
CVE-2024-34587
Improper input validation in parsing application information from RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability...
CVE-2024-34586
Improper access control in KnoxCustomManagerService prior to SMR Jul-2024 Release 1 allows local attackers to configure Knox privacy policy...
CVE-2024-34585
CVE-2024-34585 concerns improper access control in the Samsung Mobile SystemUI component, specifically the launchApp function. The vulnerability allows a local attacker to launch privileged activities due to insufficient access restrictions in SystemUI before the SMR Jul-2024 Release 1. The relat...
CVE-2024-34583
Improper access control in system property prior to SMR Jul-2024 Release 1 allows local attackers to get device identifier...
CVE-2024-20901
Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local attackers to write out-of-bounds memory...
CVE-2024-20900
Improper authentication in MTP application prior to SMR Jul-2024 Release 1 allows local attackers to enter MTP mode without proper authentication...
CVE-2024-20899
CVE-2024-20899 affects Samsung Mobile devices (IMS service, RCS function). The vulnerability stems from the use of implicit intents for sensitive communication in the RCS function, enabling local attackers to obtain sensitive information. Impact is described as local access with confidentiality e...
CVE-2024-20898
Use of implicit intent for sensitive communication in SoftphoneClient in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information...
CVE-2024-20897
Use of implicit intent for sensitive communication in FCM function in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information...
CVE-2024-20897
Use of implicit intent for sensitive communication in FCM function in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information...
CVE-2024-20897
CVE-2024-20897 affects the FCM function in Samsung IMS service (pre-SMR Jul-2024 Release 1). The root cause is use of implicit intents for sensitive communications, enabling local attackers to obtain sensitive information. Impact is described as local access leading to information disclosure. Rem...
CVE-2024-20896
Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information...
CVE-2024-20895
Improper access control in Dar service prior to SMR Jul-2024 Release 1 allows local attackers to bypass restriction for calling SDP features...
CVE-2024-20893
Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows local attackers to trigger memory corruption...
CVE-2024-20893
Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows local attackers to trigger memory corruption...
CVE-2024-20891
Improper access control in launchFullscreenIntent of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities...
CVE-2024-20890
Improper input validation in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to trigger abnormal behavior...
PT-2024-18801 · Unknown · Bluetooth Low Energy
Name of the Vulnerable Software and Affected Versions: Bluetooth Low Energy BLE versions prior to SMR Jul-2024 Release 1 Description: The issue is related to improper authentication in BLE, allowing adjacent attackers to pair with devices. This could potentially lead to unauthorized access...