7 matches found
CVE-2025-20934
CVE-2025-20934 describes an improper access control vulnerability in Samsung’s Sticker Center prior to the SMR Apr-2025 Release 1. The issue allows local attackers with low privileges to access image files with system-level privileges, implying a local privilege escalation risk. Affected software...
CVE-2025-21006
CVE-2025-21006 describes an out-of-bounds write in the MPEG-4 macroblock handling of the libsavsvc.so library, affecting some Samsung/Android components prior to Android 15. The underlying issue is a memory corruption risk due to improper handling of macro blocks in the MPEG4 codec, allowing a lo...
CVE-2025-21007
CVE-2025-21007 describes an out-of-bounds write in accessing uninitialized memory in libsavsvc.so on Android devices before 15, enabling a local attacker to cause memory corruption. The issue is a memory-unsafe access in a shared library used by the system, with a local attack vector and a potent...
CVE-2025-21005
The CVE-2025-21005 entry concerns the isemtelephony component, with the issue described as improper access control. Affected software isemtelephony is prior to Android 15, where local attackers could access sensitive information due to insufficient access restrictions. The PT Security advisory (P...
CVE-2025-21008
CVE-2025-21008 is an out-of-bounds read in the decoding frame header of libsavsvc.so on Android before 15, enabling local memory corruption. Affected component: libsavsvc.so (Android stack); root cause: out-of-bounds read in frame header decoding. Impact per sources: local attacker can cause memo...
CVE-2025-21009
The CVE-2025-21009 entry describes an out-of-bounds read in decoding a malformed frame header in libsavsvc.so, affecting Android prior to 15. This vulnerability can allow local attackers to cause memory corruption. Evidence across connected records indicates the issue is tied to the libsavsvc.so ...
CVE-2025-21041
CVE-2025-21041 concerns Samsung Secure Folder on Android versions earlier than 16. The issue is described as insecure storage of sensitive information, enabling local attackers to access confidential data due to inadequate protection in the Secure Folder storage. Affected product is Samsung Secur...