Samsung

Android

374 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2023-21430

  • EPSS 0.04%
  • Published 09.02.2023 19:15:15
  • Last modified 21.11.2024 07:42:51

An out-of-bound read vulnerability in mapToBuffer function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR JAN-2023 Release 1 allows attacker to cause memory access fault.

5.5

CVE-2023-21435

  • EPSS 0.06%
  • Published 09.02.2023 19:15:15
  • Last modified 21.11.2024 07:42:51

Exposure of Sensitive Information vulnerability in Fingerprint TA prior to SMR Feb-2023 Release 1 allows attackers to access the memory address information via log.

7.8

CVE-2023-21420

  • EPSS 0.07%
  • Published 09.02.2023 19:15:14
  • Last modified 21.11.2024 07:42:49

Use of Externally-Controlled Format String vulnerabilities in STST TA prior to SMR Jan-2023 Release 1 allows arbitrary code execution.

7.8

CVE-2023-21421

  • EPSS 0.04%
  • Published 09.02.2023 19:15:14
  • Last modified 21.11.2024 07:42:49

Improper Handling of Insufficient Permissions or Privileges vulnerability in KnoxCustomManagerService prior to SMR Jan-2023 Release 1 allows attacker to access device SIM PIN.

5.5

CVE-2023-21422

  • EPSS 0.05%
  • Published 09.02.2023 19:15:14
  • Last modified 21.11.2024 07:42:50

Improper authorization vulnerability in semAddPublicDnsAddr in WifiSevice prior to SMR Jan-2023 Release 1 allows attackers to set custom DNS server without permission via binding WifiService.

7.8

CVE-2021-25487

Warning
  • EPSS 0.93%
  • Published 06.10.2021 18:15:09
  • Last modified 14.02.2025 16:29:53

Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer.

5.5

CVE-2021-25489

Warning
  • EPSS 0.29%
  • Published 06.10.2021 18:15:09
  • Last modified 14.02.2025 16:28:02

Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic.

6.4

CVE-2021-25395

Warning
  • EPSS 0.28%
  • Published 11.06.2021 15:15:09
  • Last modified 14.02.2025 16:31:44

A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.

6.4

CVE-2021-25394

Warning
  • EPSS 0.93%
  • Published 11.06.2021 15:15:08
  • Last modified 14.02.2025 16:32:02

A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised.

5.5

CVE-2021-25369

Warning
  • EPSS 0.17%
  • Published 26.03.2021 19:15:12
  • Last modified 14.02.2025 16:41:01

An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.