Samsung

Android

374 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2024-34592

  • EPSS 0.56%
  • Published 02.07.2024 10:15:07
  • Last modified 21.11.2024 09:19:02

Improper input validation in parsing RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability.

8.8

CVE-2024-34593

  • EPSS 1.07%
  • Published 02.07.2024 10:15:07
  • Last modified 21.11.2024 09:19:02

Improper input validation in parsing and distributing RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.

5.5

CVE-2024-34594

  • EPSS 0.07%
  • Published 02.07.2024 10:15:07
  • Last modified 21.11.2024 09:19:02

Exposure of sensitive information in proc file system prior to SMR Jul-2024 Release 1 allows local attackers to read kernel memory address.

3.3

CVE-2024-34583

  • EPSS 0.08%
  • Published 02.07.2024 10:15:06
  • Last modified 21.11.2024 09:18:59

Improper access control in system property prior to SMR Jul-2024 Release 1 allows local attackers to get device identifier.

7.8

CVE-2024-34585

  • EPSS 0.06%
  • Published 02.07.2024 10:15:06
  • Last modified 21.11.2024 09:18:59

Improper access control in launchApp of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities.

3.3

CVE-2024-34586

  • EPSS 0.08%
  • Published 02.07.2024 10:15:06
  • Last modified 21.11.2024 09:18:59

Improper access control in KnoxCustomManagerService prior to SMR Jul-2024 Release 1 allows local attackers to configure Knox privacy policy.

6.8

CVE-2024-34587

  • EPSS 0.75%
  • Published 02.07.2024 10:15:06
  • Last modified 21.11.2024 09:18:59

Improper input validation in parsing application information from RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulne...

6.5

CVE-2024-34588

  • EPSS 1.06%
  • Published 02.07.2024 10:15:06
  • Last modified 21.11.2024 09:18:59

Improper input validation혻in parsing RTCP SR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability.

5.5

CVE-2024-20897

  • EPSS 0.07%
  • Published 02.07.2024 10:15:05
  • Last modified 21.11.2024 08:53:23

Use of implicit intent for sensitive communication in FCM function in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.

5.5

CVE-2024-20898

  • EPSS 0.07%
  • Published 02.07.2024 10:15:05
  • Last modified 21.11.2024 08:53:23

Use of implicit intent for sensitive communication in SoftphoneClient in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.