Browse CVEs

CRITICAL 9.8 CVE-2024-34657 Stack-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows remote attackers to execute arbitrary code. Notes 4.4.21.62+ Fix from $2,3002024-09-04 HIGH 7.8 CVE-2024-34660 Heap-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code. Notes 4.4.21.62+ Fix from $1,9502024-09-04 HIGH 7.1 CVE-2024-34658 Out-of-bounds read in Samsung Notes allows local attackers to bypass ASLR. Notes 4.4.21.62+ Fix from $1,9502024-09-04 MEDIUM 5.3 CVE-2024-34659 Exposure of sensitive information in GroupSharing prior to version 13.6.13.3 allows remote attackers can force the victim to join the group. Group Sharing 13.6.13.3+ Fix from $1,6002024-09-04 HIGH 7.8 CVE-2024-34656 Path traversal in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code. Notes 4.4.21.62+ Fix from $1,9502024-09-04 MEDIUM 5.5 CVE-2024-34654 Improper Export of android application component in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access files with My Files' pr… Android Mitigation only Fix from $1,6002024-09-04 MEDIUM 5.5 CVE-2024-34655 Incorrect use of privileged API in UniversalCredentialManager prior to SMR Sep-2024 Release 1 allows local attackers to access privileged API related… Android Mitigation only Fix from $1,6002024-09-04 MEDIUM 5.5 CVE-2024-34648 Improper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allows local attackers to access sensitive data. Android Mitigation only Fix from $1,6002024-09-04 MEDIUM 5.5 CVE-2024-34651 Improper authorization in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access restricted data in My Files. Android Mitigation only Fix from $1,6002024-09-04 MEDIUM 5.5 CVE-2024-34644 Improper access control in item selection related in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to access protected data. User … Android Mitigation only Fix from $1,6002024-09-04 MEDIUM 5.5 CVE-2024-34646 Improper access control in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to cause local permanent denial of service. Android Mitigation only Fix from $1,6002024-09-04 MEDIUM 5.5 CVE-2024-34647 Incorrect use of privileged API in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to access privileged APIs related to kn… Android Mitigation only Fix from $1,6002024-09-04 MEDIUM 5.5 CVE-2024-34643 Improper access control in key input related function in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to access protected data. U… Android Mitigation only Fix from $1,6002024-09-04 HIGH 7.1 CVE-2024-34638 Improper handling of exceptional conditions in ThemeCenter prior to SMR Sep-2024 Release 1 allows local attackers to delete non-preloaded application… Android Mitigation only Fix from $1,9502024-09-04 MEDIUM 5.5 CVE-2024-34637 Improper access control in WindowManagerService prior to SMR Sep-2024 Release 1 in Android 12, and SMR Jun-2024 Release 1 in Android 13 and Android 1… Android Mitigation only Fix from $1,6002024-09-04 CRITICAL 9.8 CVE-2024-7399 KEVEPSS 92% Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to wr… Magicinfo 9 Server 21.1050.0+ Fix from $2,3002024-08-12 MEDIUM 5.5 CVE-2024-34636 Use of implicit intent for sensitive communication in Samsung Email prior to version 6.1.94.2 allows local attackers to get sensitive information. Email 6.1.94.2+ Fix from $1,6002024-08-07 MEDIUM 5.5 CVE-2024-34627 Out-of-bounds read in parsing implemention in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. Notes 4.4.21.62+ Fix from $1,6002024-08-07 MEDIUM 5.5 CVE-2024-34628 Out-of-bounds read in applying binary with path in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. Notes 4.4.21.62+ Fix from $1,6002024-08-07 MEDIUM 5.5 CVE-2024-34629 Out-of-bounds read in applying binary with text common object in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read … Notes 4.4.21.62+ Fix from $1,6002024-08-07 MEDIUM 5.5 CVE-2024-34630 Out-of-bounds read in applying own binary with textbox in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. Notes 4.4.21.62+ Fix from $1,6002024-08-07 MEDIUM 5.5 CVE-2024-34631 Out-of-bounds read in applying new binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. Notes 4.4.21.62+ Fix from $1,6002024-08-07 HIGH 7.8 CVE-2024-34622 Out-of-bounds write in appending paragraph in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially execute arbitrary code w… Notes 4.4.21.62+ Fix from $1,9502024-08-07 HIGH 7.8 CVE-2024-34623 Out-of-bounds write in applying connected information in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially execute arbit… Notes 4.4.21.62+ Fix from $1,9502024-08-07 MEDIUM 5.5 CVE-2024-34621 Out-of-bounds read in applying binary with data in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. Notes 4.4.21.62+ Fix from $1,6002024-08-07 MEDIUM 5.5 CVE-2024-34624 Out-of-bounds read in applying paragraphs in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. Notes 4.4.21.62+ Fix from $1,6002024-08-07 MEDIUM 5.5 CVE-2024-34625 Out-of-bounds read in applying connection point in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. Notes 4.4.21.62+ Fix from $1,6002024-08-07 MEDIUM 5.5 CVE-2024-34626 Out-of-bounds read in applying own binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. Notes 4.4.21.62+ Fix from $1,6002024-08-07 HIGH 8.8 CVE-2024-34619 Improper input validation in librtp.so prior to SMR Aug-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User … Android Mitigation only Fix from $1,9502024-08-07 HIGH 7.8 CVE-2024-34620 Improper privilege management in SumeNNService prior to SMR Aug-2024 Release 1 allows local attackers to start privileged service. Android Mitigation only Fix from $1,9502024-08-07