CVE-2020-25053

An issue was discovered on Samsung mobile devices with Q10.0 exynos9830 chipsets software. RKP allows arbitrary code execution. The Samsung ID is SVE-2020-17435 August 2020...

CVE-2020-25053

CVE-2020-25053 affects Samsung mobile devices running Android Q (10.0) on Exynos9830. Root cause: RKP permits arbitrary code execution. Impact: remote code execution with high severity (CVSS v3.1 base 9.8, network access, no user interaction). Exploitation details are not provided in the document...

CVE-2020-15577

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Cameralyzer allows attackers to write files to the SD card. The Samsung ID is SVE-2020-16830 July 2020...

CVE-2020-15583

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. StickerProvider allows directory traversal for access to system files. The Samsung ID is SVE-2020-17665 July 2020...

CVE-2020-15580

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. Attackers can bypass Factory Reset Protection FRP by enrolling a new lock password. The Samsung ID is SVE-2020-17328 July 2020...

CVE-2020-15582

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 Exynos 7885 chipsets software. The Bluetooth Low Energy BLE component has a buffer overflow with a resultant deadlock or crash. The Samsung ID is SVE-2020-16870 July 2020...

CVE-2020-15579

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. Attackers can bypass Factory Reset Protection FRP via the KNOX API. The Samsung ID is SVE-2020-17318 July 2020...

CVE-2020-15577

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Cameralyzer allows attackers to write files to the SD card. The Samsung ID is SVE-2020-16830 July 2020...

CVE-2020-15578

An issue was discovered on Samsung mobile devices with O8.x software. FactoryCamera does not properly restrict runtime permissions. The Samsung ID is SVE-2020-17270 July 2020...

CVE-2020-15581

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The kernel logging feature allows attackers to discover virtual addresses via vectors involving shared memory. The Samsung ID is SVE-2020-17605 July 2020...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. Attackers can bypass Factory Reset Protection FRP by enrolling a new lock password. The Samsung ID is SVE-2020-17328 July 2020...

Out-of-bounds

An issue was discovered on Samsung mobile devices with Q10.0 software. Attackers can trigger an out-of-bounds access and device reset via a 4K wallpaper image because ImageProcessHelper mishandles boundary checks. The Samsung ID is SVE-2020-18056 July 2020...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The kernel logging feature allows attackers to discover virtual addresses via vectors involving shared memory. The Samsung ID is SVE-2020-17605 July 2020...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. Attackers can bypass Factory Reset Protection FRP via the KNOX API. The Samsung ID is SVE-2020-17318 July 2020...

Directory traversal

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. StickerProvider allows directory traversal for access to system files. The Samsung ID is SVE-2020-17665 July 2020...

Buffer overflow

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 Exynos 7885 chipsets software. The Bluetooth Low Energy BLE component has a buffer overflow with a resultant deadlock or crash. The Samsung ID is SVE-2020-16870 July 2020...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with O8.x software. FactoryCamera does not properly restrict runtime permissions. The Samsung ID is SVE-2020-17270 July 2020...

CVE-2020-15577

Samsung mobile devices running P (9.0) and Q (10.0) software are affected by CVE-2020-15577 via the Cameralyzer component, which can write files to the SD card. Root cause: Cameralyzer ability to write to external storage leads to unauthorized file writes. Impact: potential modification or insert...

CVE-2020-15577

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Cameralyzer allows attackers to write files to the SD card. The Samsung ID is SVE-2020-16830 July 2020...

CVE-2020-15578

The CVE-2020-15578 entry concerns Samsung mobile devices running O(8.x) software where the FactoryCamera component does not properly restrict runtime permissions. Affected software is described as Samsung devices with that Android/OS lineage; the root cause is the improper permission restriction ...