929 matches found
Heap overflow
Heap out-of-bounds write vulnerability in decmonoaudb of libsavsac.so prior to SMR Dec-2023 Release 1 allows an attacker to execute arbitrary code...
CVE-2023-42563
Integer overflow vulnerability in landmarkCopyImageToNative of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow...
CVE-2023-42569
CVE-2023-42569 concerns an improper authorization verification in Samsung’s AR Emoji, prior to the SMR Dec-2023 Release 1. The issue allows an attacker to read sandbox data from AR Emoji. Affected: AR Emoji components on Samsung devices. Root cause: improper authorization verification. Impact: re...
CVE-2023-42568
CVE-2023-42568 affects SmartManagerCN prior to SMR Dec-2023 Release 1. The root cause is improper access control, enabling local attackers to access arbitrary files with system privileges. Public records in NVD/Red Hat/PRION reinforce the same impact and 해당 Samsung advisories reference SMR Dec-20...
CVE-2023-42567
CVE-2023-42567 affects the softsimd component. The issue is an improper size check that enables a stack-based buffer overflow in softsimd prior to SMR Dec-2023 Release 1. Documented impact is a potential overflow; exploitation details are not provided in the sources. A remediation path is to upda...
CVE-2023-42566
Out-of-bound write vulnerability in libsavsvc prior to SMR Dec-2023 Release 1 allows local attackers to execute arbitrary code...
CVE-2023-42566
CVE-2023-42566 targets the libsavsvc component used in Samsung Mobile devices. The issue is described as an out-of-bounds write, with the root cause tied to libsavsvc prior to the SMR Dec-2023 Release 1. The documented impact is local code execution by attackers, with consequences described as ar...
CVE-2023-42565
Improper input validation vulnerability in Smart Clip prior to SMR Dec-2023 Release 1 allows local attackers with shell privilege to execute arbitrary code...
CVE-2023-42565
Summary: CVE-2023-42565 affects Samsung Smart Clip prior to SMR Dec-2023 Release 1. The issue is an improper input validation vulnerability that enables local attackers with shell privileges to execute arbitrary code. The primary affected component is Smart Clip, with the root cause stated as inp...
CVE-2023-42564
The CVE-2023-42564 issue concerns Samsung Knox knoxcustom service. Affected software/hardware: Samsung mobile devices running Knoxcustom prior to the SMR Dec-2023 Release 1. Vulnerable component: knoxcustom service. Root cause: improper access control that enables a broadcast to be sent with syst...
CVE-2023-42562
CVE-2023-42562 affects Samsung devices via the libFacePreProcessingjni.camera.samsung.so library, where an integer overflow in the function detectionFindFaceSupportMultiInstance can trigger a heap overflow. Technical details indicate versions prior to SMR Dec-2023 Release 1 are affected. Remediat...
CVE-2023-42561
CVE-2023-42561 is a heap out-of-bounds write vulnerability in the bootloader prior to Samsung SMR Dec-2023 Release 1. The issue allows a physical attacker to execute arbitrary code. No exploitation details are provided in the documents. Samsung’s security bulletin references a December 2023 patch...
CVE-2023-42560
CVE-2023-42560 is a heap out-of-bounds write in dec_mono_audb within libsavsac.so, affecting Samsung Mobile prior to SMR Dec-2023 Release 1. The vulnerability allows arbitrary code execution and is documented across multiple sources (e.g., NVD/Red Hat/CVE listed, Samsung security advisories). Aff...
CVE-2023-42558
CVE-2023-42558 is a Samsung vulnerability describing an out-of-bounds write in the HDCP component within HAL prior to Samsung SMR December 2023 Release 1, allowing attacker code execution. The connected sources consistently identify the affected area as HAL/HDCP and note that remediation is provi...
CVE-2023-42556
Improper usage of implicit intent in Contacts prior to SMR Dec-2023 Release 1 allows attacker to get sensitive information...
CVE-2023-42556
CVE-2023-42556 affects Samsung Contacts prior to SMR Dec-2023 Release 1. The issue is due to improper usage of implicit intents in Contacts, enabling an attacker to obtain sensitive information. Affected component: Contacts (Samsung Mobile). Impact is limited to information disclosure; CVSS data ...
SAMSUNG Mobile devices security vulnerability
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices prior to SMR Dec-2023 Release 1, which stems from an integer overflow vulnerability in...
PT-2023-28434 · Unknown · Smart Clip
Name of the Vulnerable Software and Affected Versions: Smart Clip versions prior to SMR Dec-2023 Release 1 Description: The issue is related to improper input validation, allowing local attackers with shell privilege to execute arbitrary code. Recommendations: For versions prior to SMR Dec-2023...
