931 matches found
CVE-2024-49412
Improper input validation in Settings prior to SMR Dec-2024 Release 1 allows local attackers to broadcast signal for discovering Bluetooth on Galaxy Watch...
CVE-2024-49411
Path Traversal in ThemeCenter prior to SMR Dec-2024 Release 1 allows physical attackers to copy apk files to arbitrary path with ThemeCenter privilege...
CVE-2024-49410
CVE-2024-49410 describes an out-of-bounds write in libswmfextractor.so, prior to Samsung SMR Dec-2024 Release 1, enabling a local attacker to execute arbitrary code. Affected component: libswmfextractor.so (pre-Release 1). Impact is local, with high potential for compromise as stated in the sourc...
CVE-2024-49410
Out-of-bounds write in libswmfextractor.so prior to SMR Dec-2024 Release 1 allows local attackers to execute arbitrary code...
CVE-2024-49410
Out-of-bounds write in libswmfextractor.so prior to SMR Dec-2024 Release 1 allows local attackers to execute arbitrary code...
Important: Red Hat Security Advisory: Control plane Operators for RHOSO 18.0.3 (Feature Release 1) security update
Control plane Operators for RHOSO 18.0.3 Feature Release 1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link...
CVE-2024-49402
Improper input validation in Dressroom prior to SMR Nov-2024 Release 1 allow physical attackers to access data across multiple user profiles...
CVE-2024-34680
Use of implicit intent for sensitive communication in WlanTest prior to SMR Nov-2024 Release 1 allows local attackers to get sensitive information...
CVE-2024-34678
Out-of-bounds write in libsapeextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption...
CVE-2024-34674
Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across multiple user profiles...
CVE-2024-49402
Improper input validation in Dressroom prior to SMR Nov-2024 Release 1 allow physical attackers to access data across multiple user profiles...
CVE-2024-34680
Use of implicit intent for sensitive communication in WlanTest prior to SMR Nov-2024 Release 1 allows local attackers to get sensitive information...
CVE-2024-34679
CVE-2024-34679 affects Crane; versions prior to SMR Nov-2024 Release 1 are vulnerable due to incorrect default permissions, permitting local attackers to access files with the phone privilege. The issue is documented across multiple feeds (Red Hat, NVD, CNVD, etc.) and is addressed by updating Cr...
CVE-2024-34678
Out-of-bounds write in libsapeextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption...
CVE-2024-34678
Out-of-bounds write in libsapeextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption...
CVE-2024-34678
CVE-2024-34678: An out-of-bounds write in libsapeextractor.so prior to SMR Nov-2024 Release 1 enables local attackers to cause memory corruption. Affected software is Samsung Mobile devices (libsapeextractor.so component). Impact per sources is memory corruption with local access required; no use...
CVE-2024-34676
CVE-2024-34676 involves an out-of-bounds write in the subtitle file parser (libsubextractor.so) on Samsung Mobile devices, enabling local memory corruption with user interaction required. Affected component: libsubextractor.so subtitle parsing; trigger: malformed subtitle input; root cause: out-o...
CVE-2024-34676
Out-of-bounds write in parsing subtitle file in libsubextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption. User interaction is required for triggering this vulnerability...