Browse CVEs

MEDIUM 5.5 CVE-2023-42539 PendingIntent hijacking vulnerability in ChallengeNotificationManager in Samsung Health prior to version 6.25 allows local attackers to access data. Health 6.25+ Fix from $1,6002023-11-07 MEDIUM 5.5 CVE-2023-42540 Improper access control vulnerability in Samsung Account prior to version 14.5.01.1 allows attackers to access sensitive information via implicit int… Account 14.5.01.1+ Fix from $1,6002023-11-07 MEDIUM 5.3 CVE-2023-42541 Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id. Push Service 3.4.10+ Fix from $1,6002023-11-07 HIGH 7.8 CVE-2023-42536 An improper input validation in saped_dec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write. Android Mitigation only Fix from $1,9502023-11-07 HIGH 7.8 CVE-2023-42537 An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write. Android Mitigation only Fix from $1,9502023-11-07 HIGH 7.8 CVE-2023-42535 Out-of-bounds Write in read_block of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code. Android Mitigation only Fix from $1,9502023-11-07 MEDIUM 5.5 CVE-2023-42534 Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to read arbitrary files with system… Android Mitigation only Fix from $1,6002023-11-07 MEDIUM 6.8 CVE-2023-42533 Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execute arbitrary code in Kernel. Android Mitigation only Fix from $1,6002023-11-07 HIGH 7.5 CVE-2023-42532 Improper Certificate Validation in FotaAgent prior to SMR Nov-2023 Release1 allows remote attacker to intercept the network traffic including Firmwar… Android Mitigation only Fix from $1,9502023-11-07 HIGH 7.1 CVE-2023-42531 Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass restrictions on starting activ… Android Mitigation only Fix from $1,9502023-11-07 HIGH 7.5 CVE-2023-42530 Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct without User I… Android Mitigation only Fix from $1,9502023-11-07 HIGH 7.8 CVE-2023-42528 Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrar… Android Mitigation only Fix from $1,9502023-11-07 HIGH 7.8 CVE-2023-42529 Out-of-bound write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to execute arbitrary code. Android Mitigation only Fix from $1,9502023-11-07 MEDIUM 5.5 CVE-2023-42527 Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to expose sensitive … Android Mitigation only Fix from $1,6002023-11-07 HIGH 7.8 CVE-2023-30739 Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code. Android Mitigation only Fix from $1,9502023-11-07 HIGH 7.8 CVE-2023-30733 Stack-based Buffer Overflow in vulnerability HDCP trustlet prior to SMR Oct-2023 Release 1 allows local privileged attackers to perform code executio… Android Mitigation only Fix from $1,9502023-10-04 HIGH 7.8 CVE-2023-30738 An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 and Gala… Galaxy Book Firmware Mitigation only Fix from $1,9502023-10-04 MEDIUM 5.5 CVE-2023-30734 Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via implicit int… Health 6.24.3.007+ Fix from $1,6002023-10-04 MEDIUM 5.5 CVE-2023-30737 Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via implicit int… Health 6.24.3.007+ Fix from $1,6002023-10-04 MEDIUM 5.4 CVE-2023-30736 Improper authorization in PushMsgReceiver of Samsung Assistant prior to version 8.7.00.1 allows attacker to execute javascript interface. To trigger … Samsung Assistant 8.7.00.1+ Fix from $1,6002023-10-04 HIGH 7.8 CVE-2023-30690 Improper input validation vulnerability in Duo prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities. Android Mitigation only Fix from $1,9502023-10-04 HIGH 7.8 CVE-2023-30692 Improper input validation vulnerability in Evaluator prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities. Android Mitigation only Fix from $1,9502023-10-04 HIGH 7.5 CVE-2023-30727 Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi and connect arbitrary Wi-Fi wit… Android Mitigation only Fix from $1,9502023-10-04 MEDIUM 5.5 CVE-2023-41911 Samsung Mobile Processor Exynos 2200 allows a GPU Double Free (issue 1 of 2). Exynos 2200 Firmware Mitigation only Fix from $1,6002023-09-28 HIGH 7.5 CVE-2023-42482 Samsung Mobile Processor Exynos 2200 allows a GPU Use After Free. Exynos 2200 Firmware Mitigation only Fix from $1,9502023-09-21 HIGH 7.3 CVE-2023-41929 A DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software before 1.0.1 could allow a local attacker to escalate p… Memory Card \& Ufd Authentication 1.0.1+ Fix from $1,9502023-09-18 HIGH 7.5 CVE-2023-37368 An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem (Exynos Mobile Processor, Automotive Processor, and Modem… Exynos 9810 Firmware Mitigation only Fix from $1,9502023-09-08 HIGH 7.5 CVE-2023-37377 An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor (Exynos 980, Exynos 850, Exynos 2100, and Exynos W920). Improper ha… Exynos 980 Firmware Mitigation only Fix from $1,9502023-09-08 MEDIUM 5.3 CVE-2023-37367 An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem (Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exynos… Exynos 9820 Firmware Mitigation only Fix from $1,6002023-09-08 MEDIUM 5.5 CVE-2023-30730 Implicit intent hijacking vulnerability in Camera prior to versions 11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 12.1.03.10 in Android 12, and 1… Camera 11.0.16.43 / 12.0.07.53+ Fix from $1,6002023-09-06