Browse CVEs

HIGH 7.8 CVE-2023-30653 Out of bounds read and write in enableTspDevice of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary c… Android Mitigation only Fix from $1,9502023-07-06 HIGH 7.8 CVE-2023-30655 Improper input validation vulnerability in SCEPProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities. Android Mitigation only Fix from $1,9502023-07-06 HIGH 7.8 CVE-2023-30656 Improper input validation vulnerability in LSOItemData prior to SMR Jul-2023 Release 1 allows attackers to launch certain activities. Android Mitigation only Fix from $1,9502023-07-06 HIGH 7.8 CVE-2023-30657 Improper input validation vulnerability in EnhancedAttestationResult prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged acti… Android Mitigation only Fix from $1,9502023-07-06 HIGH 7.8 CVE-2023-30658 Improper input validation vulnerability in DataProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities. Android Mitigation only Fix from $1,9502023-07-06 HIGH 7.8 CVE-2023-30659 Improper input validation vulnerability in Transaction prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities. Android Mitigation only Fix from $1,9502023-07-06 MEDIUM 5.5 CVE-2023-30648 Stack out-of-bounds write vulnerability in IpcRxImeiUpdateImeiNoti of RILD priro to SMR Jul-2023 Release 1 cause a denial of service on the system. Android Mitigation only Fix from $1,6002023-07-06 HIGH 7.8 CVE-2023-30644 Stack out of bound write vulnerability in CdmaSmsParser of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code. Android Mitigation only Fix from $1,9502023-07-06 HIGH 7.8 CVE-2023-30645 Heap out of bound write vulnerability in IpcRxIncomingCBMsg of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code. Android Mitigation only Fix from $1,9502023-07-06 HIGH 7.1 CVE-2023-30643 Missing authentication vulnerability in Galaxy Themes Service prior to SMR Jul-2023 Release 1 allows local attackers to delete arbitrary non-preloade… Android Mitigation only Fix from $1,9502023-07-06 MEDIUM 5.5 CVE-2023-30642 Improper privilege management vulnerability in Galaxy Themes Service prior to SMR Jul-2023 Release 1 allows local attackers to call privilege functio… Android Mitigation only Fix from $1,6002023-07-06 CRITICAL 9.8 CVE-2023-21517 Heap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows remote attacker to execute arbitrary code. Exynos Mitigation only Fix from $2,3002023-06-28 HIGH 7.8 CVE-2023-21518 Improper access control vulnerability in SearchWidget prior to version 3.3 in China models allows untrusted applications to start arbitrary activity. Searchwidget 3.3+ Fix from $1,9502023-06-28 MEDIUM 6.8 CVE-2023-21513 Improper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows physical attackers to manipulate device to operate in w… Android Mitigation only Fix from $1,6002023-06-28 CRITICAL 9.8 CVE-2023-31116 An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. An incorrect default permission can cause unintended quer… Exynos 5123 Firmware Mitigation only Fix from $2,3002023-06-07 CRITICAL 9.1 CVE-2023-31114 An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. Incorrect resource transfer between spheres can cause uni… Exynos 5123 Firmware Mitigation only Fix from $2,3002023-06-07 HIGH 7.5 CVE-2023-31115 An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. Incorrect resource transfer between spheres can cause cha… Exynos 5123 Firmware Mitigation only Fix from $1,9502023-06-07 CRITICAL 9.6 CVE-2023-21516 XSS vulnerability from InstantPlay in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy St… Galaxy Store 4.5.49.8+ Fix from $2,3002023-05-26 HIGH 8.8 CVE-2023-21514 Improper scheme validation from InstantPlay Deeplink in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install … Galaxy Store 4.5.49.8+ Fix from $1,9502023-05-26 HIGH 8.8 CVE-2023-21515 InstantPlay which included vulnerable script which could execute javascript in Galaxy Store prior to version 4.5.49.8 allows attackers to execute jav… Galaxy Store 4.5.49.8+ Fix from $1,9502023-05-26 HIGH 7.8 CVE-2023-29092 An issue was discovered in Exynos Mobile Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and Exynos 1080. Binding of a wron… Exynos 5123 Firmware Mitigation only Fix from $1,9502023-05-09 HIGH 7.8 CVE-2023-21506 Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in bc_tui trustlet from Samsung Blockchain Keystore pr… Samsung Blockchain Keystore 1.3.12.1+ Fix from $1,9502023-05-04 HIGH 7.8 CVE-2023-21508 Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA command in bc_tui trustlet from Samsung Blockchain Keystore prior to… Samsung Blockchain Keystore 1.3.12.1+ Fix from $1,9502023-05-04 HIGH 7.8 CVE-2023-21509 Out-of-bounds Write vulnerability while processing BC_TUI_CMD_UPDATE_SCREEN in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.… Samsung Blockchain Keystore 1.3.12.1+ Fix from $1,9502023-05-04 MEDIUM 5.5 CVE-2023-21507 Out-of-bounds Read vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in bc_tui trustlet from Samsung Blockchain Keystore pri… Samsung Blockchain Keystore 1.3.12.1+ Fix from $1,6002023-05-04 MEDIUM 5.5 CVE-2023-21510 Out-of-bounds Read vulnerability while processing BC_TUI_CMD_UPDATE_SCREEN in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.1… Samsung Blockchain Keystore 1.3.12.1+ Fix from $1,6002023-05-04 MEDIUM 5.5 CVE-2023-21511 Out-of-bounds Read vulnerability while processing CMD_COLDWALLET_BTC_SET_PRV_UTXO in bc_core trustlet from Samsung Blockchain Keystore prior to versi… Samsung Blockchain Keystore 1.3.12.1+ Fix from $1,6002023-05-04 CRITICAL 9.8 CVE-2023-21494 Potential buffer overflow vulnerability in auth api in mm_Authentication.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attacker… Android Mitigation only Fix from $2,3002023-05-04 CRITICAL 9.8 CVE-2023-21503 Potential buffer overflow vulnerability in mm_LteInterRatManagement.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to … Android Mitigation only Fix from $2,3002023-05-04 CRITICAL 9.8 CVE-2023-21504 Potential buffer overflow vulnerability in mm_Plmncoordination.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause… Android Mitigation only Fix from $2,3002023-05-04