203 matches found
Design/Logic Flaw
Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service process crash...
CVE-2015-7898
Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service process crash...
Design/Logic Flaw
Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service process crash...
CVE-2015-7895
Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service process crash...
CVE-2015-7898
Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service process crash...
CVE-2015-7898
CVE-2015-7898 is a local-denial-of-service vulnerability in the Samsung Gallery app on the Samsung Galaxy S6, triggered when loading a GIF in the app (GIF parsing crash). Connected sources confirm the issue resides in Samsung Gallery’s image processing path and that an exploit existed (Samsung Ga...
CVE-2015-7895
Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service process crash...
CVE-2015-7895
CVE-2015-7895 affects the Samsung Gallery app on the Galaxy S6. The issue is a local-denial-of-service triggered by a bitmap decoding crash when opening an image with Gallery (bitmap processing path). Exploit-DB documents a DOS exploit for the Android platform using a crafted bitmap (bmp_memset.b...
Directory traversal
Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remote attackers to overwrite or create arbitrary files as the system-level user via a .. dot dot in the name of a file, compressed into a zipped file named cred.zip, and downloaded ...
CVE-2015-7888
Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remote attackers to overwrite or create arbitrary files as the system-level user via a .. dot dot in the name of a file, compressed into a zipped file named cred.zip, and downloaded ...
CVE-2015-7888
CVE-2015-7888 affects Samsung Galaxy S6 Edge WifiHs20UtilityService. A directory traversal occurs when a cred.zip is placed under /sdcard/Download; the unzipping process can write files to arbitrary locations (e.g., /data/bundle) as the system user due to unverified file paths. Project Zero notes...
CVE-2015-7888
Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remote attackers to overwrite or create arbitrary files as the system-level user via a .. dot dot in the name of a file, compressed into a zipped file named cred.zip, and downloaded ...
Samsung SM-G920F Information Disclosure Vulnerability
The Samsung SM-G920F Galaxy S6 is a smartphone from the South Korean company Samsung.SecEmailSync is one of the email synchronization plugins available. An information disclosure vulnerability exists in SecEmailSync in Samsung SM-G920F build G920FXXU2COH2. An attacker can exploit the vulnerabilit...
Security Bypass Vulnerability in Multiple Samsung Phones
Samsung SM-G920F Galaxy S6 and others are smartphones released by the South Korean company Samsung Samsung. A security bypass vulnerability exists in several Samsung phones. An attacker can use the vulnerability to make a call, send a text message or issue a command...
Security Bypass Vulnerability in Multiple Samsung Phones (CNVD-2017-07192)
Samsung SM-G920F Galaxy S6 and others are smartphones released by the South Korean company Samsung Samsung. A security bypass vulnerability exists in several Samsung phones. An attacker can exploit the vulnerability to modify Android settings with the help of AT access...
Samsung SM-G920F SecEmailSync SQL Injection Vulnerability
The Samsung SM-G920F Galaxy S6 is a smartphone from the South Korean company Samsung.SecEmailSync is one of the email synchronization plugins available. An SQL injection vulnerability exists in the SecEmailSync plugin in the Samsung SM-G920F build G920FXXU2COH2 version. A remote attacker can...
CVE-2016-2036
The getURL function in drivers/secfilter/urlparser.c in secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 Note 3 and SM-G920F build G920FXXU2COH2 Galaxy S6 devices allows attackers to trigger a NULL pointer dereference via a "GET HTTP/1.1" request, aka SVE-2016-5036...
CVE-2016-2565
Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 Galaxy S6 devices allows attackers to read sent e-mail messages, aka SVE-2015-5081...
CVE-2016-4030
Samsung SM-G920F build G920FXXU2COH2 Galaxy S6, SM-N9005 build N9005XXUGBOK6 Galaxy Note 3, GT-I9192 build I9192XXUBNB1 Galaxy S4 mini, GT-I9195 build I9195XXUCOL1 Galaxy S4 mini LTE, and GT-I9505 build I9505XXUHOJ2 Galaxy S4 devices have unintended availability of the modem in USB configuration...