CVE-2023-30731

Summary (mode C): CVE-2023-30731 relates to Samsung Mobile devices prior to the SMR Oct-2023 Release 1. The issue is a logic error during package installation via a debugger command, which could let a physical attacker install an application that has a different build type. The documents do not p...

CVE-2023-30692

CVE-2023-30692 affects Samsung SMR Oct-2023 Release 1: Evaluator with improper input validation, enabling local attackers to launch privileged activities. Affected: Evaluator versions prior to SMR Oct-2023 Release 1. Impact: local privilege escalation; exploitation details are not provided in the...

CVE-2023-30690

CVE-2023-30690 relates to an improper input validation vulnerability in Samsung Duo prior to SMR Oct-2023 Release 1. The issue enables local attackers to perform privileged activities by exploiting input validation flaws in the Duo component on affected Samsung mobile devices. Affected software i...

CVE-2023-30720

PendingIntent hijacking in LmsAssemblyTrackerCTC prior to SMR Sep-2023 Release 1 allows local attacker to gain arbitrary file access...

CVE-2023-30719

Exposure of Sensitive Information vulnerability in InboundSmsHandler prior to SMR Sep-2023 Release 1 allows local attackers to access certain message data...

CVE-2023-30717

Sensitive information exposure vulnerability in SVCAgent prior to SMR Sep-2023 Release 1 allows attackers to get unresettable identifiers...

CVE-2023-30715

Improper access control vulnerability in Weather prior to SMR Sep-2023 Release 1 allows attackers to access location information set in Weather without permission...

CVE-2023-30711

Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider...

Authorization

Improper authorization vulnerability in FolderContainerDragDelegate in One UI Home prior to SMR Sep-2023 Release 1 allows physical attackers to change some settings of the folder lock...

Privilege escalation

Improper privilege management vulnerability in FolderLockNotifier in One UI Home prior to SMR Sep-2023 Release 1 allows local attackers to change some settings of the folder lock...

CVE-2023-30721

Insertion of sensitive information into log vulnerability in Locksettings prior to SMR Sep-2023 Release 1 allows a privileged local attacker to get lock screen match information from the log...

CVE-2023-30721

CVE-2023-30721 affects Samsung Android devices via a vulnerability in the Locksettings logging path where sensitive information can be inserted into logs. The underlying issue is the insertion of lockscreen match information into log data, allowing a local attacker with privileged access to read ...

CVE-2023-30721

Insertion of sensitive information into log vulnerability in Locksettings prior to SMR Sep-2023 Release 1 allows a privileged local attacker to get lock screen match information from the log...

CVE-2023-30720

PendingIntent hijacking in LmsAssemblyTrackerCTC prior to SMR Sep-2023 Release 1 allows local attacker to gain arbitrary file access...

CVE-2023-30720

CVE-2023-30720 describes a PendingIntent hijacking vulnerability in Samsung Mobile devices’ LmsAssemblyTrackerCTC, exploitable by a local attacker to gain arbitrary file access. The issue affects LmsAssemblyTrackerCTC prior to the SMR Sep-2023 Release 1. The root cause is improper PendingIntent h...

CVE-2023-30718

CVE-2023-30718 is an Android component exposure issue in WifiApAutoHotspotEnablingActivity. The vulnerability arises from improper export of the component, allowing a local attacker to change a device’s Auto Hotspot setting. Affected: Android/Samsung Mobile stack prior to SMR Sep-2023 Release 1. ...

CVE-2023-30717

Sensitive information exposure vulnerability in SVCAgent prior to SMR Sep-2023 Release 1 allows attackers to get unresettable identifiers...

CVE-2023-30717

CVE-2023-30717 is a vulnerability in Samsung SVCAgent prior to the SMR Sep-2023 Release 1 that leads to exposure of unresettable identifiers. Data shows a local attack vector with low user interaction (CVSSv3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N; base score 3.3 from NVD; Samsung’s assessment in...

CVE-2023-30716

CVE-2023-30716 affects SVCAgent prior to Samsung SMR Sep-2023 Release 1. Root cause is improper access control that can allow an attacker with local access to trigger certain commands. Impact is described as enabling command execution under local, low-complexity conditions. Remediation per connec...

CVE-2023-30715

Improper access control vulnerability in Weather prior to SMR Sep-2023 Release 1 allows attackers to access location information set in Weather without permission...