Browse CVEs

MEDIUM 5.5 CVE-2023-21465 Improper access control vulnerability in BixbyTouch prior to version 3.2.02.5 in China models allows untrusted applications access local files. Bixbytouch 3.2.02.5+ Fix from $1,6002023-03-16 CRITICAL 9.1 CVE-2023-21455 Improper authorization implementation in Exynos baseband prior to SMR Mar-2023 Release 1 allows incorrect handling of unencrypted message. Exynos Firmware Mitigation only Fix from $2,3002023-03-16 MEDIUM 5.5 CVE-2023-21449 Improper access control vulnerability in Call application prior to SMR Mar-2023 Release 1 allows local attackers to access sensitive information with… Android Mitigation only Fix from $1,6002023-03-16 MEDIUM 5.5 CVE-2023-21453 Improper input validation vulnerability in SoftSim TA prior to SMR Mar-2023 Release 1 allows local attackers access to protected data. Android Mitigation only Fix from $1,6002023-03-16 CRITICAL 9.8 CVE-2023-26076 An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and … Exynos 1280 Firmware No fix yet Fix from $2,3002023-03-13 CRITICAL 9.8 CVE-2023-26073 An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exyno… Exynos 850 Firmware No fix yet Fix from $2,3002023-03-13 CRITICAL 9.8 CVE-2023-26074 An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exyno… Exynos 850 Firmware No fix yet Fix from $2,3002023-03-13 CRITICAL 9.8 CVE-2023-24033EPSS 33% The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512 baseband modem chipsets do not properly check format … Exynos Modem 5300 Firmware No fix yet Fix from $2,3002023-03-13 CRITICAL 9.8 CVE-2023-26072 An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exyno… Exynos 850 Firmware No fix yet Fix from $2,3002023-03-13 CRITICAL 9.8 CVE-2023-26075 An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exyno… Exynos 850 Firmware No fix yet Fix from $2,3002023-03-10 HIGH 7.8 CVE-2023-21451 A Stack-based overflow vulnerability in IpcRxEmbmsSessionList in SECRIL prior to Android S(12) allows attacker to cause memory corruptions. Android Mitigation only Fix from $1,9502023-02-09 HIGH 8.8 CVE-2023-21443 Improper cryptographic implementation in Samsung Flow for Android prior to version 4.9.04 allows adjacent attackers to decrypt encrypted messages or … Flow 4.9.04+ Fix from $1,9502023-02-09 HIGH 8.8 CVE-2023-21444 Improper cryptographic implementation in Samsung Flow for PC 4.9.14.0 allows adjacent attackers to decrypt encrypted messages or inject commands. Flow 4.9.14.0+ Fix from $1,9502023-02-09 HIGH 7.8 CVE-2023-21439 Improper input validation vulnerability in UwbDataTxStatusEvent prior to SMR Feb-2023 Release 1 allows attackers to launch certain activities. Android Mitigation only Fix from $1,9502023-02-09 HIGH 7.8 CVE-2023-21445 Improper access control vulnerability in MyFiles prior to versions 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android … Android Mitigation only Fix from $1,9502023-02-09 MEDIUM 5.5 CVE-2023-21437 Improper access control vulnerability in Phone application prior to SMR Feb-2023 Release 1 allows local attackers to access sensitive information via… Android Mitigation only Fix from $1,6002023-02-09 MEDIUM 5.5 CVE-2023-21440 Improper access control vulnerability in WindowManagerService prior to SMR Feb-2023 Release 1 allows attackers to take a screen capture. Android Mitigation only Fix from $1,6002023-02-09 MEDIUM 5.5 CVE-2023-21441 Insufficient Verification of Data Authenticity vulnerability in Routine prior to versions 2.6.30.6 in Android Q(10), 3.1.21.10 in Android R(11) and 3… Android Mitigation only Fix from $1,6002023-02-09 MEDIUM 5.5 CVE-2023-21442 Improper access control vulnerability in Runestone application prior to version 2.9.09.003 in Android R(11) and 3.2.01.007 in Android S(12) allows lo… Android Mitigation only Fix from $1,6002023-02-09 MEDIUM 5.5 CVE-2023-21446 Improper input validation in MyFiles prior to version 12.2.09 in Android R(11), 13.1.03.501 in Android S( 12) and 14.1.00.422 in Android T(13) allows… Android Mitigation only Fix from $1,6002023-02-09 HIGH 7.8 CVE-2023-21430 An out-of-bound read vulnerability in mapToBuffer function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR JAN-2023 Release 1 allows… Android Mitigation only Fix from $1,9502023-02-09 HIGH 7.8 CVE-2023-21432 Improper access control vulnerabilities in Smart Things prior to 1.7.93 allows to attacker to invite others without authorization of the owner. Smart Things 1.7.93+ Fix from $1,9502023-02-09 HIGH 7.8 CVE-2023-21433 Improper access control vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to install applications from Galaxy Store. Galaxy Store 4.5.49.8+ Fix from $1,9502023-02-09 MEDIUM 6.5 CVE-2023-21427 Improper access control vulnerability in NfcTile prior to SMR Jan-2023 Release 1 allows to attacker to use NFC without user recognition. Android Mitigation only Fix from $1,6002023-02-09 MEDIUM 6.1 CVE-2023-21434EPSS 13% Improper input validation vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to execute JavaScript by launching a web pag… Galaxy Store 4.5.49.8+ Fix from $1,6002023-02-09 MEDIUM 5.5 CVE-2023-21423 Improper authorization vulnerability in ChnFileShareKit prior to SMR Jan-2023 Release 1 allows attacker to control BLE advertising without permission… Android Mitigation only Fix from $1,6002023-02-09 MEDIUM 5.5 CVE-2023-21425 Improper access control vulnerability in telecom application prior to SMR JAN-2023 Release 1 allows local attackers to get sensitive information. Android Mitigation only Fix from $1,6002023-02-09 MEDIUM 5.5 CVE-2023-21426 Hardcoded AES key to encrypt cardemulation PINs in NFC prior to SMR Jan-2023 Release 1 allows attackers to access cardemulation PIN. Android Mitigation only Fix from $1,6002023-02-09 MEDIUM 5.5 CVE-2023-21435 Exposure of Sensitive Information vulnerability in Fingerprint TA prior to SMR Feb-2023 Release 1 allows attackers to access the memory address infor… Android Mitigation only Fix from $1,6002023-02-09 HIGH 7.8 CVE-2023-21420 Use of Externally-Controlled Format String vulnerabilities in STST TA prior to SMR Jan-2023 Release 1 allows arbitrary code execution. Android Mitigation only Fix from $1,9502023-02-09