CVE-2022-27829

CVE-2022-27829 is described across multiple connected sources as an improper validation vulnerability in Samsung SMR’s VerifyCredentialResponse prior to SMR Apr-2022 Release 1. The issue enables attackers to launch certain activities, with affected entities typically within the device’s local tru...

CVE-2022-27828

Improper validation vulnerability in MediaMonitorEvent prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities...

CVE-2022-27826

Technical details about CVE-2022-27826 are not publicly provided in the connected documents; monitor for updates.

CVE-2022-27827

The CVE-2022-27827 entry concerns an improper validation vulnerability in MediaMonitorDimension, prior to Samsung SMR Apr-2022 Release 1. Affected item appears to be the MediaMonitorDimension component (in Samsung context) where input validation fails, enabling attackers to launch certain activit...

CVE-2022-27825

The CVE-2022-27825 vulnerability affects the libsapeextractor library, specifically the sapefd_parse_meta_HEADER function. A faulty size check can allow an out-of-bounds read when processing a crafted media file. This issue is addressed in Samsung SMR Apr-2022 Release 1 (patch package), mitigatin...

CVE-2022-27823

Improper size check in sapefdparsemetaHEADERold function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file...

CVE-2022-27823

CVE-2022-27823 affects Samsung SMR libsapeextractor: the sapefd_parse_meta_HEADER_old function may read out of bounds when processing a crafted media file. The issue is rooted in an improper size check, enabling out-of-bounds reads. Impact is described as partial confidentiality and partial avail...

CVE-2022-27821

CVE-2022-27821 concerns the Quram Agif library prior to Samsung SMR Apr-2022 Release 1, where an improper boundary check enables denial of service when processing a crafted image file. Multiple sources (Red Hat, NVD, CNVD, CVE listings) describe the issue consistently as a boundary-checking flaw ...

CVE-2022-27576

Samsung DeX Home Information Disclosure (CVE-2022-27576) affects Samsung DeX Home prior to the SMR April-2022 Release 1. Root cause: lack of proper access authentication logic that can reveal information about the currently launched foreground application. Impact: information exposure with access...

CVE-2022-27574

CVE-2022-27574 affects the Samsung libsimba library prior to SMR Apr-2022 Release 1, caused by improper input validation in parser_iloc and sheifd_find_itemIndexin functions, enabling an out-of-bounds write by a privileged attacker. Documented impact indicators in NVD and Red Hat/CVE feeds descri...

CVE-2022-27571

CVE-2022-27571 describes a heap-based buffer overflow in the function sheifd_get_info_image of the libsimba library, prior to the Samsung SMR Apr-2022 Release 1. This vulnerability could enable remote code execution without user interaction, with network access as the attack vector. The CVSS data...

CVE-2022-27568

CVE-2022-27568 describes a heap-based buffer overflow in the parser_iloc function of the libsimba library. The vulnerability allows a remote attacker to achieve code execution and arises in versions prior to Samsung SMR Apr-2022 Release 1. The issue is documented across multiple sources (NVD, Red...

CVE-2022-27567

This CVE (CVE-2022-27567) affects the libsimba library via a null pointer dereference in the parser_hvcC function, leading to an out-of-bounds write. The issue is triggered remotely by attackers and is tied to the libsimba code before SMR Apr-2022 Release 1. Several connected sources corroborate ...

CVE-2022-26096

CVE-2022-26096 describes a null pointer dereference in the parser_ispe function of the libsimba library prior to Samsung SMR Apr-2022 Release 1. The flaw permits a remote attacker to cause an out-of-bounds write. Connected documents consistently identify the affected component as libsimba and the...

CVE-2022-26095

CVE-2022-26095 affects the libsimba library, with a null pointer dereference in the parser_colr function prior to Samsung SMR Apr-2022 Release 1, enabling out-of-bounds writes by a remote attacker. Impacts and mitigations from connected docs indicate vulnerable component is the parser_colr code p...

CVE-2022-26094

The CVE-2022-26094 entry describes a null pointer dereference in the parser_auxC function of the libsimba library, prior to Samsung SMR Apr-2022 Release 1, which allows remote attackers to cause an out-of-bounds write. The vulnerability is discussed across multiple feeds (NVD/Red Hat/CNVD/CVELIST...

CVE-2022-26093

CVE-2022-26093 is a vulnerability in the libsimba library’s parser_irot function. The issue is a null pointer dereference that enables an out-of-bounds write by a remote attacker in affected builds prior to Samsung SMR Apr-2022 Release 1. Reports in multiple feeds (NVD, Red Hat, CNVD, CVE lists) ...

CVE-2022-26092

Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows arbitrary code execution...

CVE-2022-26090

Summary of CVE-2022-26090 : The vulnerability affects SamsungContacts prior to SMR Apr-2022 Release 1, caused by an improper access control error that could allow attackers to access contact information without permission. The issue is documented across multiple sources, with remediation advising...

CVE-2022-25833

The CVE-2022-25833 entry concerns Samsung SMR prior to Apr-2022 Release 1, where improper authentication in ImsService could allow an attacker to obtain IMSI without the READ_PRIVILEGED_PHONE_STATE permission. The vulnerability involves authentication checks in ImsService, enabling local access t...