Samsung
Page 7 of 17 — Samsung CVEs from a corpus of 1634, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-27381 | Medium | 6.0 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_send_action_frame_u… |
CVE-2024-27380 | Medium | 6.0 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_set_delayed_wakeup_… |
CVE-2024-27379 | Medium | 6.7 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_subscribe_get_n… |
CVE-2024-27378 | Medium | 6.0 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_send_action_frame_c… |
CVE-2024-27377 | Medium | 6.7 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_get_security_in… |
CVE-2024-27376 | Medium | 6.7 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_subscribe_get_n… |
CVE-2024-27375 | Medium | 6.7 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_followup_get_nl… |
CVE-2024-27374 | Medium | 6.7 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_publish_get_nl_… |
CVE-2024-27373 | Medium | 6.7 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_config_get_nl_p… |
CVE-2024-27372 | Medium | 6.7 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_config_get_nl_p… |
CVE-2024-27371 | Medium | 6.7 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_followup_get_nl… |
CVE-2024-27370 | Medium | 6.7 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_config_get_nl_p… |
CVE-2023-50804 | Low | 3.7 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor, and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2… |
CVE-2023-50803 | Low | 3.7 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor, and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2… |
CVE-2023-49928 | High | 7.5 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, E… |
CVE-2023-49927 | Medium | 5.3 | 2024-06-05 | An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, E… |
CVE-2024-29152 | Medium | 5.9 | 2024-06-04 | An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280… |
CVE-2024-20887 | Medium | 6.2 | 2024-06-04 | Arbitrary directory creation in GalaxyBudsManager PC prior to version 2.1.240315.51 allows attacker to create arbitrary directory. |
CVE-2024-20885 | Medium | 5.1 | 2024-06-04 | Improper component protection vulnerability in Samsung Dialer prior to SMR May-2024 Release 1 allows local attackers to make a call without proper permission. |
CVE-2024-20884 | Medium | 6.2 | 2024-06-04 | Incorrect use of privileged API vulnerability in getSemBatteryUsageStats in BatteryStatsService prior to SMR Jun-2024 Release 1 allows local attackers to use p… |
CVE-2024-20883 | Medium | 6.2 | 2024-06-04 | Incorrect use of privileged API vulnerability in registerBatteryStatsCallback in BatteryStatsService prior to SMR Jun-2024 Release 1 allows local attackers to… |
CVE-2024-20882 | Medium | 4.6 | 2024-06-04 | Out-of-bounds read vulnerability in bootloader prior to SMR June-2024 Release 1 allows physical attackers to arbitrary data access. |
CVE-2024-20881 | Medium | 6.4 | 2024-06-04 | Improper input validation vulnerability in chnactiv TA prior to SMR Jun-2024 Release 1 allows local privileged attackers lead to potential arbitrary code execu… |
CVE-2024-20880 | Medium | 6.4 | 2024-06-04 | Stack-based buffer overflow vulnerability in bootloader prior to SMR Jun-2024 Release 1 allows physical attackers to overwrite memory. |
CVE-2024-20879 | Medium | 4.0 | 2024-06-04 | Improper input validation vulnerability in libsavscmn.so prior to SMR Jun-2024 Release 1 allows local attackers to write out-of-bounds memory. |
CVE-2024-20878 | High | 7.3 | 2024-06-04 | Heap out-of-bound write vulnerability in parsing grid image in libsavscmn.so prior to SMR June-2024 Release 1 allows local attackers to execute arbitrary code. |
CVE-2024-20877 | High | 7.3 | 2024-06-04 | Heap out-of-bound write vulnerability in parsing grid image header in libsavscmn.so prior to SMR Jun-2024 Release 1 allows local attackers to execute arbitrary… |
CVE-2024-20876 | Medium | 6.1 | 2024-06-04 | Improper input validation in libsheifdecadapter.so prior to SMR Jun-2024 Release 1 allows local attackers to lead to memory corruption. |
CVE-2024-20875 | Medium | 4.0 | 2024-06-04 | Improper caller verification vulnerability in SemClipboard prior to SMR June-2024 Release 1 allows local attackers to access arbitrary files. |
CVE-2024-20874 | High | 7.9 | 2024-06-04 | Improper access control vulnerability in SmartManagerCN prior to SMR Jun-2024 Release 1 allows local attackers to launch privileged activities. |
CVE-2024-20873 | Medium | 4.2 | 2024-06-04 | Improper input validation vulnerability in caminfo driver prior to SMR Jun-2024 Release 1 allows local privileged attackers to write out-of-bounds memory. |
CVE-2024-31953 | Medium | 6.7 | 2024-05-14 | An issue was discovered in Samsung Magician 8.0.0 on macOS. Because it is possible to tamper with the directory and executable files used during the installati… |
CVE-2024-31952 | Medium | 6.7 | 2024-05-14 | An issue was discovered in Samsung Magician 8.0.0 on macOS. Because symlinks are used during the installation process, an attacker can escalate privileges via… |
CVE-2024-20872 | Medium | 6.2 | 2024-05-07 | Improper handling of insufficient privileges vulnerability in TalkbackSE prior to version Android 14 allows local attackers to modify setting value of Talkback… |
CVE-2024-20871 | Medium | 4.9 | 2024-05-07 | Improper authorization vulnerability in Samsung Keyboard prior to version One UI 5.1.1 allows physical attackers to partially bypass the factory reset protecti… |
CVE-2024-20870 | Medium | 5.1 | 2024-05-07 | Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.71.8 allows local attackers to write arbitrary files w… |
CVE-2024-20869 | Medium | 5.5 | 2024-05-07 | Improper privilege management vulnerability in Samsung Internet prior to version 25.0.0.41 allows local attackers to bypass protection for cookies. |
CVE-2024-20868 | Medium | 4.4 | 2024-05-07 | Improper input validation in Samsung Notes prior to version 4.4.15 allows local attackers to delete files with Samsung Notes privilege under certain conditions. |
CVE-2024-20867 | Medium | 5.5 | 2024-05-07 | Improper privilege management vulnerability in Samsung Email prior to version 6.1.91.14 allows local attackers to access sensitive information. |
CVE-2024-20866 | Medium | 5.7 | 2024-05-07 | Authentication bypass vulnerability in Setupwizard prior to SMR May-2024 Release 1 allows physical attackers to skip activation step. |
CVE-2024-20865 | Medium | 6.6 | 2024-05-07 | Authentication bypass in bootloader prior to SMR May-2024 Release 1 allows physical attackers to flash arbitrary images. |
CVE-2024-20864 | Medium | 5.5 | 2024-05-07 | Improper access control vulnerability in DarManagerService prior to SMR May-2024 Release 1 allows local attackers to monitor system resources. |
CVE-2024-20863 | Medium | 6.7 | 2024-05-07 | Out of bounds write vulnerability in SNAP in HAL prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code. |
CVE-2024-20862 | Medium | 6.0 | 2024-05-07 | Out-of-bounds write in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code. |
CVE-2024-20861 | Medium | 6.0 | 2024-05-07 | Use after free vulnerability in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to cause memory corruption. |
CVE-2024-20860 | Medium | 4.0 | 2024-05-07 | Improper export of android application components vulnerability in TelephonyUI prior to SMR May-2024 Release 1 allows local attackers to reboot the device with… |
CVE-2024-20859 | Medium | 5.5 | 2024-05-07 | Improper access control vulnerability in FactoryCamera prior to SMR May-2024 Release 1 allows local attackers to take pictures without privilege. |
CVE-2024-20858 | Medium | 4.0 | 2024-05-07 | Improper access control vulnerability in setCocktailHostCallbacks of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to access inform… |
CVE-2024-20857 | Medium | 4.0 | 2024-05-07 | Improper access control vulnerability in startListening of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to access information of c… |
CVE-2024-20856 | Medium | 4.3 | 2024-05-07 | Improper Authentication vulnerability in Secure Folder prior to SMR May-2024 Release 1 allows physical attackers to access Secure Folder without proper authent… |
CVE-2024-20855 | Low | 2.4 | 2024-05-07 | Improper access control vulnerability in multitasking framework prior to SMR May-2024 Release 1 allows physical attackers to access unlocked screen for a while. |
CVE-2024-20854 | Medium | 5.9 | 2024-04-02 | Improper handling of insufficient privileges vulnerability in Samsung Camera prior to versions 12.1.0.31 in Android 12, 13.1.02.07 in Android 13, and 14.0.01.0… |
CVE-2024-20853 | Medium | 5.1 | 2024-04-02 | Improper verification of intent by broadcast receiver vulnerability in ThemeStore prior to 5.3.05.2 allows local attackers to write arbitrary files to sandbox… |
CVE-2024-20852 | Medium | 5.9 | 2024-04-02 | Improper verification of intent by broadcast receiver vulnerability in SmartThings prior to version 1.8.13.22 allows local attackers to access testing configur… |
CVE-2024-20851 | Medium | 4.4 | 2024-04-02 | Improper access control vulnerability in Samsung Data Store prior to version 5.3.00.4 allows local attackers to launch arbitrary activity with Samsung Data Sto… |
CVE-2024-20850 | Medium | 6.2 | 2024-04-02 | Use of Implicit Intent for Sensitive Communication in Samsung Pay prior to version 5.4.99 allows local attackers to access information of Samsung Pay. |
CVE-2024-20849 | High | 7.3 | 2024-04-02 | Out-of-bound Write vulnerability in chunk parsing implementation of libsdffextractor prior to SMR Apr-2023 Release 1 allows local attackers to execute arbitrar… |
CVE-2024-20848 | Medium | 4.0 | 2024-04-02 | Improper Input Validation vulnerability in text parsing implementation of libsdffextractor prior to SMR Apr-2024 Release 1 allows local attackers to write out-… |
CVE-2024-20847 | Medium | 4.0 | 2024-04-02 | Improper Access Control vulnerability in StorageManagerService prior to SMR Apr-2024 Release 1 allows local attackers to read sdcard information. |
CVE-2024-20846 | Medium | 5.9 | 2024-04-02 | Out-of-bounds write vulnerability while decoding hcr of libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code. |
CVE-2024-20845 | High | 8.4 | 2024-04-02 | Out-of-bounds write vulnerability while releasing memory in libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code. |
CVE-2024-20844 | High | 8.4 | 2024-04-02 | Out-of-bounds write vulnerability while parsing remaining codewords in libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary… |
CVE-2024-20843 | Medium | 5.6 | 2024-04-02 | Out-of-bound write vulnerability in command parsing implementation of libIfaaCa prior to SMR Apr-2024 Release 1 allows local privileged attackers to execute ar… |
CVE-2024-20842 | Medium | 4.2 | 2024-04-02 | Improper Input Validation vulnerability in handling apdu of libsec-ril prior to SMR Apr-2024 Release 1 allows local privileged attackers to write out-of-bounds… |
CVE-2024-20833 | Medium | 4.1 | 2024-03-05 | Use after free vulnerability in pub_crypto_recv_msg prior to SMR Mar-2024 Release 1 due to race condition allows local attackers with system privilege to cause… |
CVE-2024-20841 | Medium | 5.1 | 2024-03-05 | Improper Handling of Insufficient Privileges in Samsung Account prior to version 14.8.00.3 allows local attackers to access data. |
CVE-2024-20840 | Medium | 5.7 | 2024-03-05 | Improper access control in Samsung Voice Recorder prior to versions 21.5.16.01 in Android 12 and Android 13, 21.4.51.02 in Android 14 allows physical attackers… |
CVE-2024-20839 | Medium | 4.6 | 2024-03-05 | Improper access control in Samsung Voice Recorder prior to versions 21.5.16.01 in Android 12 and Android 13, 21.4.51.02 in Android 14 allows physical attackers… |
CVE-2024-20838 | Medium | 6.8 | 2024-03-05 | Improper validation vulnerability in Samsung Internet prior to version 24.0.3.2 allows local attackers to execute arbitrary code. |
CVE-2024-20837 | Medium | 5.3 | 2024-03-05 | Improper handling of granting permission for Trusted Web Activities in Samsung Internet prior to version 24.0.0.41 allows local attackers to grant permission t… |
CVE-2024-20836 | Low | 3.3 | 2024-03-05 | Out of bounds Read vulnerability in ssmis_get_frm in libsubextractor.so prior to SMR Mar-2024 Release 1 allows local attackers to read out of bounds memory. |
CVE-2024-20835 | Medium | 4.0 | 2024-03-05 | Improper access control vulnerability in CustomFrequencyManagerService prior to SMR Mar-2024 Release 1 allows local attackers to execute privileged behaviors. |
CVE-2024-20834 | Low | 3.3 | 2024-03-05 | The sensitive information exposure vulnerability in WlanTest prior to SMR Mar-2024 Release 1 allows local attackers to access MAC address without proper permis… |
CVE-2024-20832 | Medium | 6.4 | 2024-03-05 | Heap overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows local privileged attackers to execute arbitrary code. |
CVE-2024-20831 | Medium | 6.4 | 2024-03-05 | Stack overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows local privileged attackers to execute arbitrary code. |
CVE-2024-20830 | Medium | 5.3 | 2024-03-05 | Incorrect default permission in AppLock prior to SMR MAr-2024 Release 1 allows local attackers to configure AppLock settings. |
CVE-2024-20829 | Medium | 5.4 | 2024-03-05 | Missing proper interaction for opening deeplink in Samsung Internet prior to version v24.0.0.0 allows remote attackers to open an application without proper in… |
CVE-2023-52432 | Medium | 5.9 | 2024-03-05 | Improper input validation in IpcTxSndSetLoopbackCtrl in libsec-ril prior to SMR Sep-2023 Release 1 allows local attackers to write out-of-bounds memory. |
CVE-2024-23769 | High | 7.3 | 2024-02-07 | Improper privilege control for the named pipe in Samsung Magician PC Software 8.0.0 (for Windows) allows a local attacker to read privileged data. |
CVE-2024-20828 | Low | 2.4 | 2024-02-06 | Improper authorization verification vulnerability in Samsung Internet prior to version 24.0 allows physical attackers to access files downloaded in SecretMode… |
CVE-2024-20827 | Medium | 4.6 | 2024-02-06 | Improper access control vulnerability in Samsung Gallery prior to version 14.5.04.4 allows physical attackers to access the picture using physical keyboard on… |
CVE-2024-20826 | Medium | 5.5 | 2024-02-06 | Implicit intent hijacking vulnerability in UPHelper library prior to version 4.0.0 allows local attackers to access sensitive information via implicit intent. |
CVE-2024-20825 | Medium | 5.5 | 2024-02-06 | Implicit intent hijacking vulnerability in IAP of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit in… |
CVE-2024-20824 | Medium | 5.5 | 2024-02-06 | Implicit intent hijacking vulnerability in VoiceSearch of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via imp… |
CVE-2024-20823 | Medium | 5.5 | 2024-02-06 | Implicit intent hijacking vulnerability in SamsungAccount of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via… |
CVE-2024-20822 | Medium | 5.5 | 2024-02-06 | Implicit intent hijacking vulnerability in AccountActivity of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via… |
CVE-2024-20820 | Medium | 4.4 | 2024-02-06 | Improper input validation in bootloader prior to SMR Feb-2024 Release 1 allows local privileged attackers to cause an Out-Of-Bounds read. |
CVE-2024-20819 | Medium | 6.6 | 2024-02-06 | Out-of-bounds Write vulnerabilities in svc1td_vld_plh_ap of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow. |
CVE-2024-20818 | Medium | 6.6 | 2024-02-06 | Out-of-bounds Write vulnerabilities in svc1td_vld_elh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow. |
CVE-2024-20817 | Medium | 6.6 | 2024-02-06 | Out-of-bounds Write vulnerabilities in svc1td_vld_slh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow. |
CVE-2024-20816 | High | 8.0 | 2024-02-06 | Improper authentication vulnerability in onCharacteristicWriteRequest in Auto Hotspot prior to SMR Feb-2024 Release 1 allows adjacent attackers connect to vict… |
CVE-2024-20815 | High | 8.0 | 2024-02-06 | Improper authentication vulnerability in onCharacteristicReadRequest in Auto Hotspot prior to SMR Feb-2024 Release 1 allows adjacent attackers connect to victi… |
CVE-2024-20814 | Medium | 4.0 | 2024-02-06 | Out-of-bounds Read in padmd_vld_ac_prog_refine of libpadm.so prior to SMR Feb-2024 Release 1 allows local attackers access unauthorized information. |
CVE-2024-20813 | High | 8.4 | 2024-02-06 | Out-of-bounds Write in padmd_vld_qtbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code. |
CVE-2024-20812 | High | 8.4 | 2024-02-06 | Out-of-bounds Write in padmd_vld_htbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code. |
CVE-2024-20811 | Medium | 5.1 | 2024-02-06 | Improper caller verification in GameOptimizer prior to SMR Feb-2024 Release 1 allows local attackers to configure GameOptimizer. |
CVE-2024-20810 | Low | 3.3 | 2024-02-06 | Implicit intent hijacking vulnerability in Smart Suggestions prior to SMR Feb-2024 Release 1 allows local attackers to get sensitive information. |
CVE-2024-20809 | Medium | 4.0 | 2024-01-04 | Improper access control vulnerability in Nearby device scanning prior version 11.1.14.7 allows local attacker to access data. |
CVE-2024-20808 | Medium | 4.0 | 2024-01-04 | Improper access control vulnerability in Nearby device scanning prior version 11.1.14.7 allows local attacker to access data. |
CVE-2024-20807 | Low | 3.3 | 2024-01-04 | Implicit intent hijacking vulnerability in Samsung Email prior to version 6.1.90.16 allows local attacker to get sensitive information. |