CVE-2016-11043

An issue was discovered on Samsung mobile devices with M6.0 software. The S/MIME implementation in EAS uses DES where 3DES is intended. The Samsung ID is SVE-2016-5871 June 2016...

CVE-2016-11045

The CVE-2016-11045 entry relates to Samsung mobile devices running Lollipop (5.0/5.1) where the Gallery library is vulnerable to memory corruption triggered by a malformed image. Documented impact indicates potential data/process integrity concerns within the Gallery component. The issue is assoc...

CVE-2016-11045

An issue was discovered on Samsung mobile devices with L5.0/5.1 software. The Gallery library allow memory corruption via a malformed image. The Samsung ID is SVE-2016-5317 May 2016...

CVE-2016-11046

The CVE-2016-11046 issue affects Samsung mobile devices running JBP (4.3), KK (4.4), and L (5.0/5.1) where a misused whitelist allows access to the Radio Interface Layer (RIL/RILD) enabling calls or SMS. Affected component is the RIL path; root cause is the whitelist mishandling, as described in ...

CVE-2016-11046

An issue was discovered on Samsung mobile devices with JBP4.3, KK4.4, and L5.0/5.1 software. Because of a misused whitelist, attackers can reach the radio layer aka RIL or RILD to place calls or send SMS messages. The Samsung ID is SVE-2016-5733 May 2016...

CVE-2016-11047

Samsung mobile devices with JBP(4.2) and KK(4.4) on Marvell chipsets are affected by CVE-2016-11047 due to a stack-based buffer overflow in the ACIPC-MSOCKET driver, enabling local privilege escalation. Root cause: vulnerable ACIPC-MSOCKET component; impact: local privilege elevation as described...

CVE-2016-11048

Technical details for CVE-2016-11048 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-11049

An issue was discovered on Samsung mobile devices with software through 2016-01-16 Shannon333/308/310 chipsets. The IMEI may be retrieved and modified because of an error in managing key information. The Samsung ID is SVE-2016-5435 March 2016...

CVE-2016-11050

An issue was discovered on Samsung mobile devices with S3KK, Note2KK, S4L, Note3L, and S5L software. An attacker can rewrite the IMEI by flashing crafted firmware. The Samsung ID is SVE-2016-5562 March 2016...

CVE-2016-11052

An issue was discovered on Samsung mobile devices with L5.0/5.1 software. jefree in libQjpeg.so in Qjpeg in Qt 5.5 allows memory corruption via a malformed JPEG file. The Samsung ID is SVE-2015-5110 January 2016...

CVE-2016-11052

This CVE affects Samsung mobile devices running Lollipop (5.0/5.1) and involves memory corruption in je_free() within libQjpeg.so (Qt 5.5’s Qjpeg). The root cause is parsing a malformed JPEG file, leading to potential memory corruption in affected components. Connected documents confirm the issue...

CVE-2016-11053

CVE-2016-11053 concerns a Factory Reset Protection (FRP) bypass on Samsung mobile devices with software up to 2015-11-11 (FRP/RL support). The entry notes the Samsung ID SVE-2015-5131 (January 2016). The description indicates an FRP bypass vulnerability, but does not provide technical details on ...

CVE-2019-20622

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos chipsets software. There is a baseband stack overflow. The Samsung ID is SVE-2018-13188 February 2019...

CVE-2019-20620

An issue was discovered on Samsung mobile devices with P9.0 software. The Settings application allows unauthenticated changes. The Samsung IDs are SVE-2019-13814, SVE-2019-13815 March 2019...

CVE-2019-20623

An issue was discovered on Samsung mobile devices with N7.1, O8.x, and P9.0 software. Gallery has uninitialized memory disclosure. The Samsung ID is SVE-2018-13060 February 2019...

CVE-2019-20621

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos chipsets software. There is a baseband heap overflow. The Samsung ID is SVE-2018-13187 February 2019...

CVE-2019-20614

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. Allshare allows attackers to access sensitive information. The Samsung ID is SVE-2018-13453 March 2019...

CVE-2019-20618

An issue was discovered on Samsung mobile devices with P9.0 software. The Pin Window feature allows unauthenticated unpinning of an app. The Samsung ID is SVE-2018-13765 March 2019...

CVE-2019-20621

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos chipsets software. There is a baseband heap overflow. The Samsung ID is SVE-2018-13187 February 2019...

CVE-2019-20625

An issue was discovered on Samsung mobile devices with N7.1 and O8.x Exynos chipsets software. The ion debugfs driver allows information disclosure. The Samsung ID is SVE-2018-13427 February 2019...