Browse CVEs

MEDIUM 5.5 CVE-2024-34616 Improper handling of insufficient permission in KnoxDualDARPolicy prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive data. Android Mitigation only Fix from $1,6002024-08-07 HIGH 7.8 CVE-2024-34612 Out-of-bound write in libcodec2secmp4vdec.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code. Android Mitigation only Fix from $1,9502024-08-07 HIGH 7.8 CVE-2024-34614 Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code. Android Mitigation only Fix from $1,9502024-08-07 HIGH 7.8 CVE-2024-34615 Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to cause memory corruption. Android Mitigation only Fix from $1,9502024-08-07 MEDIUM 5.5 CVE-2024-34611 Improper access control in KnoxService prior to SMR Aug-2024 Release 1 allows local attackers to get sensitive information. Android Mitigation only Fix from $1,6002024-08-07 MEDIUM 5.5 CVE-2024-34613 Improper access control in Galaxy Watch prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive information of Galaxy watch. Wear Os Mitigation only Fix from $1,6002024-08-07 MEDIUM 5.5 CVE-2024-34605 Improper access control in SamsungHealthService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services fr… Android Mitigation only Fix from $1,6002024-08-07 MEDIUM 5.5 CVE-2024-34606 Improper access control in SmartThingsService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from… Android Mitigation only Fix from $1,6002024-08-07 MEDIUM 5.5 CVE-2024-34607 Improper access control in SamsungNotesService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services fro… Android Mitigation only Fix from $1,6002024-08-07 MEDIUM 5.5 CVE-2024-34608 Improper access control in PaymentManagerService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services f… Android Mitigation only Fix from $1,6002024-08-07 MEDIUM 5.5 CVE-2024-34609 Improper access control in VoiceNoteService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from t… Android Mitigation only Fix from $1,6002024-08-07 MEDIUM 5.5 CVE-2024-34610 Improper access control in ExtControlDeviceService prior to SMR Aug-2024 Release 1 allows local attackers to access protected data. Android Mitigation only Fix from $1,6002024-08-07 MEDIUM 5.5 CVE-2024-34604 Improper access control in LedCoverService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from th… Android Mitigation only Fix from $1,6002024-08-07 CRITICAL 9.8 CVE-2024-32671 Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows Overflow Buffers.This issue affects Escargot: 4.0.0. Escargot Patch available Fix from $2,3002024-07-29 MEDIUM 6.7 CVE-2024-27385 A vulnerability was discovered in the slsi_handle_nan_rx_event_log_ind function in Samsung Mobile Processor Exynos 1380 and Exynos 1480 related to no… Exynos 1380 Firmware Mitigation only Fix from $1,6002024-07-09 MEDIUM 6.7 CVE-2024-27386 A vulnerability was discovered in the slsi_handle_nan_rx_event_log_ind function in Samsung Mobile Processor Exynos 1380 and Exynos 1480 related to no… Exynos 1380 Firmware Mitigation only Fix from $1,6002024-07-09 HIGH 8.1 CVE-2024-29153 A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos… Exynos 9820 Firmware Mitigation only Fix from $1,9502024-07-09 MEDIUM 5.3 CVE-2024-28068 A vulnerability was discovered in SS in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, … Exynos 9820 Firmware Mitigation only Fix from $1,6002024-07-09 HIGH 8.1 CVE-2023-50807 A vulnerability was discovered in Samsung Wearable Processor and Modems with versions Exynos 9110, Exynos Modem 5123, Exynos Modem 5300 that allows a… Exynos 9110 Firmware Mitigation only Fix from $1,9502024-07-09 HIGH 8.4 CVE-2023-50806 A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos… Exynos Modem 5123 Firmware Mitigation only Fix from $1,9502024-07-09 HIGH 8.1 CVE-2023-50805 A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos… Exynos 1080 Firmware Mitigation only Fix from $1,9502024-07-09 HIGH 7.5 CVE-2024-31957 A vulnerability was discovered in Samsung Mobile Processors Exynos 2200 and Exynos 2400 where they lack a check for the validation of native handles,… Exynos 2200 Firmware Mitigation only Fix from $1,9502024-07-09 HIGH 7.5 CVE-2024-27360 A vulnerability was discovered in Samsung Mobile Processors Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330,… Exynos 850 Firmware Mitigation only Fix from $1,9502024-07-09 HIGH 7.5 CVE-2024-27362 A vulnerability was discovered in Samsung Mobile Processors Exynos 1280, Exynos 2200, Exynos 1330, Exynos 1380, and Exynos 2400 where they do not pro… Exynos 1280 Firmware Mitigation only Fix from $1,9502024-07-09 MEDIUM 5.5 CVE-2024-34603 Improper access control in Samsung Message prior to SMR Jul-2024 Release 1 allows local attackers to access location data. Android Mitigation only Fix from $1,6002024-07-08 MEDIUM 5.5 CVE-2024-34602 Use of implicit intent for sensitive communication in Samsung Messages prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive inform… Android Mitigation only Fix from $1,6002024-07-08 HIGH 7.8 CVE-2024-34595 Improper access control in clickAdapterItem of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities. Android Mitigation only Fix from $1,9502024-07-02 HIGH 7.5 CVE-2024-34596 Improper authentication in SmartThings prior to version 1.8.17 allows remote attackers to bypass the expiration date for members set by the owner. Smartthings 1.8.17+ Fix from $1,9502024-07-02 MEDIUM 5.3 CVE-2024-34601 Improper verification of intent by broadcast receiver vulnerability in GalaxyStore prior to version 4.5.81.0 allows local attackers to launch unexpor… Galaxy Store 4.5.81.0+ Fix from $1,6002024-07-02 HIGH 8.8 CVE-2024-34593 Improper input validation in parsing and distributing RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arb… Android Mitigation only Fix from $1,9502024-07-02