929 matches found
PT-2024-18811 · Unknown · Softphoneclient
Name of the Vulnerable Software and Affected Versions: SoftphoneClient in IMS service versions prior to SMR Jul-2024 Release 1 Description: The issue allows local attackers to obtain sensitive information due to the use of implicit intent for sensitive communication in the SoftphoneClient...
PT-2024-18808 · Unknown · Dar Service
Name of the Vulnerable Software and Affected Versions: Dar service versions prior to SMR Jul-2024 Release 1 Description: The issue is related to improper access control in the Dar service, allowing local attackers to bypass restrictions for calling SDP features. Recommendations: For versions prio...
PT-2024-18810 · Ims · Ims
Name of the Vulnerable Software and Affected Versions: FCM function in IMS service versions prior to SMR Jul-2024 Release 1 Description: The issue concerns the use of implicit intent for sensitive communication in the FCM function within the IMS service, allowing local attackers to obtain sensiti...
CVE-2024-20876
Improper input validation in libsheifdecadapter.so prior to SMR Jun-2024 Release 1 allows local attackers to lead to memory corruption...
CVE-2024-20875
Improper caller verification vulnerability in SemClipboard prior to SMR June-2024 Release 1 allows local attackers to access arbitrary files...
CVE-2024-20873
Improper input validation vulnerability in caminfo driver prior to SMR Jun-2024 Release 1 allows local privileged attackers to write out-of-bounds memory...
CVE-2024-20874
Improper access control vulnerability in SmartManagerCN prior to SMR Jun-2024 Release 1 allows local attackers to launch privileged activities...
CVE-2024-20885
Improper component protection vulnerability in Samsung Dialer prior to SMR May-2024 Release 1 allows local attackers to make a call without proper permission...
CVE-2024-20885
Improper component protection vulnerability in Samsung Dialer prior to SMR May-2024 Release 1 allows local attackers to make a call without proper permission...
CVE-2024-20884
Incorrect use of privileged API vulnerability in getSemBatteryUsageStats in BatteryStatsService prior to SMR Jun-2024 Release 1 allows local attackers to use privileged API...
CVE-2024-20883
Incorrect use of privileged API vulnerability in registerBatteryStatsCallback in BatteryStatsService prior to SMR Jun-2024 Release 1 allows local attackers to use privileged API...
CVE-2024-20879
Improper input validation vulnerability in libsavscmn.so prior to SMR Jun-2024 Release 1 allows local attackers to write out-of-bounds memory...
CVE-2024-20879
Improper input validation vulnerability in libsavscmn.so prior to SMR Jun-2024 Release 1 allows local attackers to write out-of-bounds memory...
CVE-2024-20878
Heap out-of-bound write vulnerability in parsing grid image in libsavscmn.so prior to SMR June-2024 Release 1 allows local attackers to execute arbitrary code...
CVE-2024-20876
Improper input validation in libsheifdecadapter.so prior to SMR Jun-2024 Release 1 allows local attackers to lead to memory corruption...
CVE-2024-20861
Use after free vulnerability in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to cause memory corruption...
CVE-2024-20858
Improper access control vulnerability in setCocktailHostCallbacks of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to access information of current application...
CVE-2024-20866
Setupwizard on Samsung mobile devices contains an authentication bypass vulnerability prior to SMR May-2024 Release 1, allowing a physical attacker to bypass the activation step. According to PT-2024-18776, the issue affects Setupwizard versions prior to the May-2024 Release 1 and can be mitigate...