Samsung Mobile
Page 5 of 14 — Samsung Mobile CVEs from a corpus of 1362, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-34655 | Medium | 6.2 | 2024-09-04 | Incorrect use of privileged API in UniversalCredentialManager prior to SMR Sep-2024 Release 1 allows local attackers to access privileged API related to Univer… |
CVE-2024-34654 | Medium | 6.2 | 2024-09-04 | Improper Export of android application component in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access files with My Files' privilege. |
CVE-2024-34653 | Medium | 4.6 | 2024-09-04 | Path Traversal in My Files prior to SMR Sep-2024 Release 1 allows physical attackers to access directories with My Files' privilege. |
CVE-2024-34652 | Medium | 4.0 | 2024-09-04 | Incorrect authorization in kperfmon prior to SMR Sep-2024 Release 1 allows local attackers to access information related to performance including app usage. |
CVE-2024-34651 | Medium | 6.2 | 2024-09-04 | Improper authorization in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access restricted data in My Files. |
CVE-2024-34650 | Medium | 4.0 | 2024-09-04 | Incorrect authorization in CocktailbarService prior to SMR Sep-2024 Release 1 allows local attackers to access privileged APIs related to Edge panel. |
CVE-2024-34649 | Low | 2.4 | 2024-09-04 | Improper access control in new Dex Mode in multitasking framework prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access an unlocked s… |
CVE-2024-34648 | Medium | 5.1 | 2024-09-04 | Improper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allows local attackers to access sensitive data. |
CVE-2024-34647 | Medium | 4.0 | 2024-09-04 | Incorrect use of privileged API in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to access privileged APIs related to knox without… |
CVE-2024-34646 | Medium | 6.6 | 2024-09-04 | Improper access control in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to cause local permanent denial of service. |
CVE-2024-34645 | Medium | 6.1 | 2024-09-04 | Improper input validation in ThemeCenter prior to SMR Sep-2024 Release 1 allows physical attackers to install privileged applications. |
CVE-2024-34644 | Medium | 4.4 | 2024-09-04 | Improper access control in item selection related in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to access protected data. User interactio… |
CVE-2024-34643 | Medium | 4.4 | 2024-09-04 | Improper access control in key input related function in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to access protected data. User intera… |
CVE-2024-34642 | Medium | 4.6 | 2024-09-04 | Improper authorization in One UI Home prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access sensitive information. |
CVE-2024-34641 | Medium | 5.1 | 2024-09-04 | Improper Export of Android Application Components in FeliCaTest prior to SMR Sep-2024 Release 1 allows local attackers to enable NFC configuration. |
CVE-2024-34640 | Low | 3.3 | 2024-09-04 | Improper access control vulnerability in BGProtectManager prior to SMR Sep-2024 Release 1 allows local attackers to bypass restriction of process expiration. |
CVE-2024-34639 | Medium | 4.6 | 2024-09-04 | Improper handling of exceptional conditions in Setupwizard prior to SMR Aug-2024 Release 1 allows physical attackers to bypass proper validation. |
CVE-2024-34638 | Medium | 6.7 | 2024-09-04 | Improper handling of exceptional conditions in ThemeCenter prior to SMR Sep-2024 Release 1 allows local attackers to delete non-preloaded applications. |
CVE-2024-34637 | Medium | 6.2 | 2024-09-04 | Improper access control in WindowManagerService prior to SMR Sep-2024 Release 1 in Android 12, and SMR Jun-2024 Release 1 in Android 13 and Android 14 allows l… |
CVE-2024-34636 | Medium | 4.0 | 2024-08-07 | Use of implicit intent for sensitive communication in Samsung Email prior to version 6.1.94.2 allows local attackers to get sensitive information. |
CVE-2024-34635 | Medium | 4.0 | 2024-08-07 | Out-of-bounds read in parsing textbox object in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory. |
CVE-2024-34634 | Medium | 4.0 | 2024-08-07 | Out-of-bounds read in parsing connected object list in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory. |
CVE-2024-34633 | Medium | 4.0 | 2024-08-07 | Out-of-bounds read in parsing object header in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory. |
CVE-2024-34632 | Medium | 4.0 | 2024-08-07 | Out-of-bounds read in uuid parsing in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory. |
CVE-2024-34631 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in applying new binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34630 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in applying own binary with textbox in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34629 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in applying binary with text common object in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34628 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in applying binary with path in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34627 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in parsing implemention in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34626 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in applying own binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34625 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in applying connection point in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34624 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in applying paragraphs in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34623 | High | 7.8 | 2024-08-07 | Out-of-bounds write in applying connected information in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially execute arbitrary code… |
CVE-2024-34622 | High | 7.8 | 2024-08-07 | Out-of-bounds write in appending paragraph in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially execute arbitrary code with Samsun… |
CVE-2024-34621 | Medium | 5.5 | 2024-08-07 | Out-of-bounds read in applying binary with data in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. |
CVE-2024-34620 | High | 8.4 | 2024-08-07 | Improper privilege management in SumeNNService prior to SMR Aug-2024 Release 1 allows local attackers to start privileged service. |
CVE-2024-34619 | High | 7.5 | 2024-08-07 | Improper input validation in librtp.so prior to SMR Aug-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interactio… |
CVE-2024-34618 | Medium | 4.0 | 2024-08-07 | Improper access control in System property prior to SMR Aug-2024 Release 1 allows local attackers to access cell related information. |
CVE-2024-34617 | Medium | 4.0 | 2024-08-07 | Improper handling of insufficient permission in Telephony prior to SMR Aug-2024 Release 1 allows local attackers to configure default Message application. |
CVE-2024-34616 | Medium | 5.1 | 2024-08-07 | Improper handling of insufficient permission in KnoxDualDARPolicy prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive data. |
CVE-2024-34615 | Medium | 5.1 | 2024-08-07 | Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to cause memory corruption. |
CVE-2024-34614 | High | 7.3 | 2024-08-07 | Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code. |
CVE-2024-34613 | Medium | 4.0 | 2024-08-07 | Improper access control in Galaxy Watch prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive information of Galaxy watch. |
CVE-2024-34612 | High | 7.3 | 2024-08-07 | Out-of-bound write in libcodec2secmp4vdec.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code. |
CVE-2024-34611 | Medium | 5.1 | 2024-08-07 | Improper access control in KnoxService prior to SMR Aug-2024 Release 1 allows local attackers to get sensitive information. |
CVE-2024-34610 | Medium | 5.1 | 2024-08-07 | Improper access control in ExtControlDeviceService prior to SMR Aug-2024 Release 1 allows local attackers to access protected data. |
CVE-2024-34609 | Medium | 6.2 | 2024-08-07 | Improper access control in VoiceNoteService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the backgro… |
CVE-2024-34608 | Medium | 6.2 | 2024-08-07 | Improper access control in PaymentManagerService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the ba… |
CVE-2024-34607 | Medium | 6.2 | 2024-08-07 | Improper access control in SamsungNotesService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the back… |
CVE-2024-34606 | Medium | 6.2 | 2024-08-07 | Improper access control in SmartThingsService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the backg… |
CVE-2024-34605 | Medium | 6.2 | 2024-08-07 | Improper access control in SamsungHealthService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the bac… |
CVE-2024-34604 | Medium | 6.2 | 2024-08-07 | Improper access control in LedCoverService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the backgrou… |
CVE-2024-34603 | Medium | 4.0 | 2024-07-08 | Improper access control in Samsung Message prior to SMR Jul-2024 Release 1 allows local attackers to access location data. |
CVE-2024-34602 | Low | 3.3 | 2024-07-08 | Use of implicit intent for sensitive communication in Samsung Messages prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information. Use… |
CVE-2024-34601 | Medium | 5.9 | 2024-07-02 | Improper verification of intent by broadcast receiver vulnerability in GalaxyStore prior to version 4.5.81.0 allows local attackers to launch unexported activi… |
CVE-2024-34600 | Medium | 4.4 | 2024-07-02 | Improper verification of intent by broadcast receiver vulnerability in Samsung Flow prior to version 4.9.13.0 allows local attackers to copy image files to ext… |
CVE-2024-34599 | Medium | 4.0 | 2024-07-02 | Improper input validation in Tips prior to version 6.2.9.4 in Android 14 allows local attacker to send broadcast with Tips' privilege. |
CVE-2024-34597 | Medium | 4.4 | 2024-07-02 | Improper input validation in Samsung Health prior to version 6.27.0.113 allows local attackers to write arbitrary document files to the sandbox of Samsung Heal… |
CVE-2024-34596 | Medium | 5.9 | 2024-07-02 | Improper authentication in SmartThings prior to version 1.8.17 allows remote attackers to bypass the expiration date for members set by the owner. |
CVE-2024-34595 | High | 7.8 | 2024-07-02 | Improper access control in clickAdapterItem of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities. |
CVE-2024-34594 | Medium | 5.5 | 2024-07-02 | Exposure of sensitive information in proc file system prior to SMR Jul-2024 Release 1 allows local attackers to read kernel memory address. |
CVE-2024-34593 | High | 7.5 | 2024-07-02 | Improper input validation in parsing and distributing RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary cod… |
CVE-2024-34592 | Medium | 5.3 | 2024-07-02 | Improper input validation in parsing RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of servi… |
CVE-2024-34591 | Medium | 5.3 | 2024-07-02 | Improper input validation in parsing an item data from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger tempora… |
CVE-2024-34590 | Medium | 5.3 | 2024-07-02 | Improper input validation혻in parsing an item type from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger tempora… |
CVE-2024-34589 | Medium | 5.3 | 2024-07-02 | Improper input validation in parsing RTCP RR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service… |
CVE-2024-34588 | Medium | 5.3 | 2024-07-02 | Improper input validation혻in parsing RTCP SR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service… |
CVE-2024-34587 | High | 7.5 | 2024-07-02 | Improper input validation in parsing application information from RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute a… |
CVE-2024-34586 | Medium | 5.9 | 2024-07-02 | Improper access control in KnoxCustomManagerService prior to SMR Jul-2024 Release 1 allows local attackers to configure Knox privacy policy. |
CVE-2024-34585 | High | 7.8 | 2024-07-02 | Improper access control in launchApp of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities. |
CVE-2024-34583 | Medium | 4.0 | 2024-07-02 | Improper access control in system property prior to SMR Jul-2024 Release 1 allows local attackers to get device identifier. |
CVE-2024-20901 | Medium | 5.9 | 2024-07-02 | Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local attackers to write out-of-bounds memory. |
CVE-2024-20900 | Medium | 4.0 | 2024-07-02 | Improper authentication in MTP application prior to SMR Jul-2024 Release 1 allows local attackers to enter MTP mode without proper authentication. |
CVE-2024-20899 | Medium | 4.0 | 2024-07-02 | Use of implicit intent for sensitive communication in RCS function in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive infor… |
CVE-2024-20898 | Medium | 4.0 | 2024-07-02 | Use of implicit intent for sensitive communication in SoftphoneClient in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive in… |
CVE-2024-20897 | Medium | 4.0 | 2024-07-02 | Use of implicit intent for sensitive communication in FCM function in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive infor… |
CVE-2024-20896 | Medium | 5.5 | 2024-07-02 | Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information. |
CVE-2024-20895 | High | 7.7 | 2024-07-02 | Improper access control in Dar service prior to SMR Jul-2024 Release 1 allows local attackers to bypass restriction for calling SDP features. |
CVE-2024-20894 | Medium | 4.3 | 2024-07-02 | Improper handling of exceptional conditions in Secure Folder prior to SMR Jul-2024 Release 1 allows physical attackers to bypass authentication under certain c… |
CVE-2024-20893 | Medium | 6.1 | 2024-07-02 | Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows local attackers to trigger memory corruption. |
CVE-2024-20892 | Medium | 6.5 | 2024-07-02 | Improper verification of signature in FilterProvider prior to SMR Jul-2024 Release 1 allows local attackers to execute privileged behaviors. User interaction i… |
CVE-2024-20891 | High | 7.8 | 2024-07-02 | Improper access control in launchFullscreenIntent of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities. |
CVE-2024-20890 | Medium | 5.3 | 2024-07-02 | Improper input validation in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to trigger abnormal behavior. |
CVE-2024-20889 | Medium | 5.9 | 2024-07-02 | Improper authentication in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to pair with devices. |
CVE-2024-20888 | High | 7.8 | 2024-07-02 | Improper access control in OneUIHome prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities. User interaction is required for t… |
CVE-2024-20887 | Medium | 6.2 | 2024-06-04 | Arbitrary directory creation in GalaxyBudsManager PC prior to version 2.1.240315.51 allows attacker to create arbitrary directory. |
CVE-2024-20886 | Medium | 6.2 | 2024-06-04 | Arbitrary directory creation in Samsung Live Wallpaper PC prior to version 3.3.8.0 allows attacker to create arbitrary directory. |
CVE-2024-20885 | Medium | 5.1 | 2024-06-04 | Improper component protection vulnerability in Samsung Dialer prior to SMR May-2024 Release 1 allows local attackers to make a call without proper permission. |
CVE-2024-20884 | Medium | 6.2 | 2024-06-04 | Incorrect use of privileged API vulnerability in getSemBatteryUsageStats in BatteryStatsService prior to SMR Jun-2024 Release 1 allows local attackers to use p… |
CVE-2024-20883 | Medium | 6.2 | 2024-06-04 | Incorrect use of privileged API vulnerability in registerBatteryStatsCallback in BatteryStatsService prior to SMR Jun-2024 Release 1 allows local attackers to… |
CVE-2024-20882 | Medium | 4.6 | 2024-06-04 | Out-of-bounds read vulnerability in bootloader prior to SMR June-2024 Release 1 allows physical attackers to arbitrary data access. |
CVE-2024-20881 | Medium | 6.4 | 2024-06-04 | Improper input validation vulnerability in chnactiv TA prior to SMR Jun-2024 Release 1 allows local privileged attackers lead to potential arbitrary code execu… |
CVE-2024-20880 | Medium | 6.4 | 2024-06-04 | Stack-based buffer overflow vulnerability in bootloader prior to SMR Jun-2024 Release 1 allows physical attackers to overwrite memory. |
CVE-2024-20879 | Medium | 4.0 | 2024-06-04 | Improper input validation vulnerability in libsavscmn.so prior to SMR Jun-2024 Release 1 allows local attackers to write out-of-bounds memory. |
CVE-2024-20878 | High | 7.3 | 2024-06-04 | Heap out-of-bound write vulnerability in parsing grid image in libsavscmn.so prior to SMR June-2024 Release 1 allows local attackers to execute arbitrary code. |
CVE-2024-20877 | High | 7.3 | 2024-06-04 | Heap out-of-bound write vulnerability in parsing grid image header in libsavscmn.so prior to SMR Jun-2024 Release 1 allows local attackers to execute arbitrary… |
CVE-2024-20876 | Medium | 6.1 | 2024-06-04 | Improper input validation in libsheifdecadapter.so prior to SMR Jun-2024 Release 1 allows local attackers to lead to memory corruption. |
CVE-2024-20875 | Medium | 4.0 | 2024-06-04 | Improper caller verification vulnerability in SemClipboard prior to SMR June-2024 Release 1 allows local attackers to access arbitrary files. |
CVE-2024-20874 | High | 7.9 | 2024-06-04 | Improper access control vulnerability in SmartManagerCN prior to SMR Jun-2024 Release 1 allows local attackers to launch privileged activities. |
CVE-2024-20873 | Medium | 4.2 | 2024-06-04 | Improper input validation vulnerability in caminfo driver prior to SMR Jun-2024 Release 1 allows local privileged attackers to write out-of-bounds memory. |