Samsung
Page 9 of 17 — Samsung CVEs from a corpus of 1634, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-30716 | Medium | 4.0 | 2023-09-06 | Improper access control vulnerability in SVCAgent prior to SMR Sep-2023 Release 1 allows attackers to trigger certain commands. |
CVE-2023-30715 | Medium | 4.0 | 2023-09-06 | Improper access control vulnerability in Weather prior to SMR Sep-2023 Release 1 allows attackers to access location information set in Weather without permiss… |
CVE-2023-30714 | Medium | 4.6 | 2023-09-06 | Improper authorization vulnerability in FolderContainerDragDelegate in One UI Home prior to SMR Sep-2023 Release 1 allows physical attackers to change some set… |
CVE-2023-30713 | Medium | 6.2 | 2023-09-06 | Improper privilege management vulnerability in FolderLockNotifier in One UI Home prior to SMR Sep-2023 Release 1 allows local attackers to change some settings… |
CVE-2023-30712 | Medium | 6.8 | 2023-09-06 | Improper input validation in Settings Suggestions prior to SMR Sep-2023 Release 1 allows attackers to launch arbitrary activity. |
CVE-2023-30711 | Medium | 4.0 | 2023-09-06 | Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider. |
CVE-2023-30710 | High | 8.5 | 2023-09-06 | Improper input validation vulnerability in Knox AI prior to SMR Sep-2023 Release 1 allows local attackers to launch privileged activities. |
CVE-2023-30709 | High | 7.9 | 2023-09-06 | Improper access control in Dual Messenger prior to SMR Sep-2023 Release 1 allows local attackers launch activity with system privilege. |
CVE-2023-30708 | Medium | 4.6 | 2023-09-06 | Improper authentication in SecSettings prior to SMR Sep-2023 Release 1 allows attacker to access Captive Portal Wi-Fi in Reactivation Lock status. |
CVE-2023-30707 | Medium | 4.0 | 2023-09-06 | Improper input validation vulnerability in FileProviderStatusReceiver in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows local attackers to delete arbi… |
CVE-2023-30706 | High | 7.5 | 2023-09-06 | Improper authorization in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows attacker to read arbitrary file with system privilege. |
CVE-2023-36481 | High | 7.5 | 2023-08-28 | An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, and W92… |
CVE-2021-35309 | High | 7.5 | 2023-08-22 | An issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers to gain escalated privileges via MITM attacks. |
CVE-2020-22181 | Medium | 6.1 | 2023-08-22 | A reflected cross site scripting (XSS) vulnerability was discovered on Samsung sww-3400rw Router devices via the m2 parameter of the sess-bin/command.cgi |
CVE-2022-4894 | High | 7.3 | 2023-08-16 | Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element. |
CVE-2023-40293 | Medium | 6.8 | 2023-08-14 | Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object. |
CVE-2023-40292 | Medium | 4.3 | 2023-08-14 | Harman Infotainment 20190525031613 and later discloses the IP address via CarPlay CTRL packets. |
CVE-2023-40291 | Medium | 6.8 | 2023-08-14 | Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project name. |
CVE-2023-30705 | Medium | 6.8 | 2023-08-10 | Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.56.6?allows local attackers to access privileged content providers as Galaxy Stor… |
CVE-2023-30704 | Low | 3.8 | 2023-08-10 | Improper Authorization vulnerability in Samsung Internet prior to version 22.0.0.35 allows physical attacker access downloaded files in Secret Mode without use… |
CVE-2023-30703 | Low | 3.3 | 2023-08-10 | Improper URL validation vulnerability in Samsung Members prior to version 14.0.07.1 allows attackers to access sensitive information. |
CVE-2023-30702 | Medium | 6.7 | 2023-08-10 | Stack overflow vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" in Windows Update for Galax… |
CVE-2023-30701 | Medium | 4.7 | 2023-08-10 | PendingIntent hijacking in WifiGeofenceManager prior to SMR Aug-2023 Release 1 allows local attacker to arbitrary file access. |
CVE-2023-30700 | Medium | 5.3 | 2023-08-10 | PendingIntent hijacking vulnerability in SemWifiApTimeOutImpl in framework prior to SMR Aug-2023 Release 1 allows local attackers to access ContentProvider wit… |
CVE-2023-30699 | High | 7.5 | 2023-08-10 | Out-of-bounds write vulnerability in parser_hvcC function of libsimba library prior to SMR Aug-2023 Release 1 allows code execution by remote attackers. |
CVE-2023-30698 | Medium | 5.5 | 2023-08-10 | Improper access control vulnerability in TelephonyUI prior to SMR Aug-2023 Release 1 allows local attacker to connect BLE without privilege. |
CVE-2023-30697 | Medium | 4.4 | 2023-08-10 | An improper input validation in IpcTxCfgSetSimlockPayload in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write. |
CVE-2023-30696 | Medium | 4.4 | 2023-08-10 | An improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write. |
CVE-2023-30695 | Medium | 6.7 | 2023-08-10 | Out-of-bounds Write vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" in Windows Update for… |
CVE-2023-30694 | Medium | 6.7 | 2023-08-10 | Out-of-bounds Write in IpcTxPcscTransmitApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code. |
CVE-2023-30693 | Medium | 6.7 | 2023-08-10 | Out-of-bounds Write in DoOemFactorySendFactoryBypassCommand of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code. |
CVE-2023-30691 | High | 8.4 | 2023-08-10 | Parcel mismatch in AuthenticationConfig prior to SMR Aug-2023 Release 1 allows local attacker to privilege escalation. |
CVE-2023-30689 | Medium | 6.7 | 2023-08-10 | Out-of-bounds Write in BuildOemEmbmsGetSigStrengthResponse of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code. |
CVE-2023-30688 | Medium | 6.7 | 2023-08-10 | Out-of-bounds Write in MakeUiccAuthForOem of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code. |
CVE-2023-30687 | Medium | 6.7 | 2023-08-10 | Out-of-bounds Write in RmtUimApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code. |
CVE-2023-30686 | Medium | 6.7 | 2023-08-10 | Out-of-bounds Write in ReqDataRaw of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code. |
CVE-2023-30685 | Medium | 4.3 | 2023-08-10 | Improper access control vulnerability in Telecom prior to SMR Aug-2023 Release 1 allows local attakcers to change TTY mode. |
CVE-2023-30684 | Medium | 4.3 | 2023-08-10 | Improper access control in Samsung Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call acceptRingingCall API without permission. |
CVE-2023-30683 | Medium | 4.3 | 2023-08-10 | Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call endCall API without permission. |
CVE-2023-30682 | Medium | 4.3 | 2023-08-10 | Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call silenceRinger API without permission. |
CVE-2023-30681 | Medium | 4.4 | 2023-08-10 | An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds… |
CVE-2023-30680 | High | 8.4 | 2023-08-10 | Improper privilege management vulnerability in MMIGroup prior to SMR Aug-2023 Release 1 allows code execution with privilege. |
CVE-2023-30679 | High | 7.8 | 2023-08-10 | Improper access control in HDCP trustlet prior to SMR Aug-2023 Release 1 allows local attackers to execute arbitrary code. |
CVE-2023-30654 | Medium | 6.7 | 2023-08-10 | Improper access control vulnerability in SLocationService prior to SMR Aug-2023 Release 1 allows local attacker to update fake location. |
CVE-2023-36482 | Medium | 4.3 | 2023-08-08 | An issue was discovered in Samsung NFC S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, and S3NRN82. A buffer copy without checking its input size can cause an NFC service… |
CVE-2023-38523 | Medium | 5.3 | 2023-07-20 | The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, without authentication, exposing sensitive… |
CVE-2023-30678 | Medium | 5.1 | 2023-07-06 | Potential zip path traversal vulnerability in Calendar application prior to version 12.4.07.15 in Android 13 allows attackers to write arbitrary file. |
CVE-2023-30677 | Medium | 6.1 | 2023-07-06 | Improper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access data of Samsung Pass on a certain state of… |
CVE-2023-30676 | Medium | 4.6 | 2023-07-06 | Improper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access data of Samsung Pass. |
CVE-2023-30675 | Medium | 6.2 | 2023-07-06 | Improper authentication in Samsung Pass prior to version 4.2.03.1 allows local attacker to access stored account information when Samsung Wallet is not install… |
CVE-2023-30674 | Medium | 6.5 | 2023-07-06 | Improper configuration in Samsung Internet prior to version 21.0.0.41 allows attacker to bypass SameSite Cookie. |
CVE-2023-30673 | Medium | 5.5 | 2023-07-06 | Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.23052_1 allows local attackers to delete arbitrary directory using… |
CVE-2023-30672 | Medium | 6.8 | 2023-07-06 | Improper privilege management vulnerability in Samsung Smart Switch for Windows Installer prior to version 4.3.23043_3 allows attackers to cause permanent DoS… |
CVE-2023-30671 | Medium | 6.3 | 2023-07-06 | Logic error in package installation via adb command prior to SMR Jul-2023 Release 1 allows local attackers to downgrade installed application. |
CVE-2023-30670 | Medium | 6.7 | 2023-07-06 | Out-of-bounds Write in BuildIpcFactoryDeviceTestEvent of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacker to execute arbitrary code. |
CVE-2023-30669 | Medium | 6.7 | 2023-07-06 | Out-of-bounds Write in DoOemFactorySendFactoryTestResult of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacker to execute arbitrary code. |
CVE-2023-30668 | Medium | 6.7 | 2023-07-06 | Out-of-bounds Write in BuildOemSecureSimLockResponse of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacker to execute arbitrary code. |
CVE-2023-30667 | Medium | 5.1 | 2023-07-06 | Improper access control in Audio system service prior to SMR Jul-2023 Release 1 allows attacker to send broadcast with system privilege. |
CVE-2023-30666 | Medium | 5.3 | 2023-07-06 | Improper input validation vulnerability in DoOemImeiSetPreconfig in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds… |
CVE-2023-30665 | Medium | 4.4 | 2023-07-06 | Improper input validation vulnerability in OnOemServiceMode in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds read. |
CVE-2023-30664 | High | 8.5 | 2023-07-06 | Improper input validation vulnerability in RegisteredMSISDN prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities. |
CVE-2023-30663 | Medium | 5.3 | 2023-07-06 | Improper input validation vulnerability in OemPersonalizationSetLock in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bo… |
CVE-2023-30662 | Medium | 6.2 | 2023-07-06 | Exposure of Sensitive Information vulnerability in getChipIds in UwbAospAdapterService prior to SMR Jul-2023 Release 1 allows local attackers to access the UWB… |
CVE-2023-30661 | Medium | 6.2 | 2023-07-06 | Exposure of Sensitive Information vulnerability in getChipInfos in UwbAospAdapterService prior to SMR Jul-2023 Release 1 allows local attackers to access the U… |
CVE-2023-30660 | Medium | 6.2 | 2023-07-06 | Exposure of Sensitive Information vulnerability in getDefaultChipId in UwbAospAdapterService prior to SMR Jul-2023 Release 1 allows local attackers to access t… |
CVE-2023-30659 | Medium | 6.2 | 2023-07-06 | Improper input validation vulnerability in Transaction prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities. |
CVE-2023-30658 | High | 8.5 | 2023-07-06 | Improper input validation vulnerability in DataProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities. |
CVE-2023-30657 | Medium | 6.2 | 2023-07-06 | Improper input validation vulnerability in EnhancedAttestationResult prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities. |
CVE-2023-30656 | High | 8.5 | 2023-07-06 | Improper input validation vulnerability in LSOItemData prior to SMR Jul-2023 Release 1 allows attackers to launch certain activities. |
CVE-2023-30655 | High | 8.5 | 2023-07-06 | Improper input validation vulnerability in SCEPProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities. |
CVE-2023-30653 | Medium | 6.7 | 2023-07-06 | Out of bounds read and write in enableTspDevice of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code. |
CVE-2023-30652 | Medium | 6.7 | 2023-07-06 | Out of bounds read and write in callrunTspCmdNoRead of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code. |
CVE-2023-30651 | Medium | 6.7 | 2023-07-06 | Out of bounds read and write in callgetTspsysfs of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code. |
CVE-2023-30650 | Medium | 6.7 | 2023-07-06 | Out of bounds read and write in callrunTspCmd of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code. |
CVE-2023-30649 | High | 7.8 | 2023-07-06 | Heap out of bound write vulnerability in RmtUimNeedApdu of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code. |
CVE-2023-30648 | Low | 3.3 | 2023-07-06 | Stack out-of-bounds write vulnerability in IpcRxImeiUpdateImeiNoti of RILD priro to SMR Jul-2023 Release 1 cause a denial of service on the system. |
CVE-2023-30647 | High | 7.8 | 2023-07-06 | Heap out of bound write vulnerability in IpcRxUsimPhoneBookCapa of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code. |
CVE-2023-30646 | High | 7.8 | 2023-07-06 | Heap out of bound write vulnerability in BroadcastSmsConfig of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code. |
CVE-2023-30645 | High | 7.8 | 2023-07-06 | Heap out of bound write vulnerability in IpcRxIncomingCBMsg of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code. |
CVE-2023-30644 | High | 7.8 | 2023-07-06 | Stack out of bound write vulnerability in CdmaSmsParser of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code. |
CVE-2023-30643 | High | 7.7 | 2023-07-06 | Missing authentication vulnerability in Galaxy Themes Service prior to SMR Jul-2023 Release 1 allows local attackers to delete arbitrary non-preloaded applicat… |
CVE-2023-30642 | Medium | 6.2 | 2023-07-06 | Improper privilege management vulnerability in Galaxy Themes Service prior to SMR Jul-2023 Release 1 allows local attackers to call privilege function. |
CVE-2023-30641 | Medium | 4.3 | 2023-07-06 | Improper access control vulnerability in Settings prior to SMR Jul-2023 Release 1 allows physical attacker to use restricted user profile to access device owne… |
CVE-2023-30640 | Medium | 4.3 | 2023-07-06 | Improper access control vulnerability in PersonaManagerService prior to SMR Jul-2023 Release 1 allows local attackers to change confiugration. |
CVE-2023-21518 | Medium | 4.4 | 2023-06-28 | Improper access control vulnerability in SearchWidget prior to version 3.3 in China models allows untrusted applications to start arbitrary activity. |
CVE-2023-21517 | High | 8.8 | 2023-06-28 | Heap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows remote attacker to execute arbitrary code. |
CVE-2023-21513 | Medium | 6.1 | 2023-06-28 | Improper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows physical attackers to manipulate device to operate in way that re… |
CVE-2023-21512 | Low | 2.4 | 2023-06-28 | Improper Knox ID validation logic in notification framework prior to SMR Jun-2023 Release 1 allows local attackers to read work profile notifications without p… |
CVE-2023-31116 | Critical | 9.8 | 2023-06-07 | An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. An incorrect default permission can cause unintended querying of RC… |
CVE-2023-31115 | High | 7.5 | 2023-06-07 | An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. Incorrect resource transfer between spheres can cause changes to th… |
CVE-2023-31114 | Critical | 9.1 | 2023-06-07 | An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. Incorrect resource transfer between spheres can cause unintended qu… |
CVE-2023-21516 | High | 7.5 | 2023-05-26 | XSS vulnerability from InstantPlay in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store. |
CVE-2023-21515 | High | 7.5 | 2023-05-26 | InstantPlay which included vulnerable script which could execute javascript in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript AP… |
CVE-2023-21514 | High | 7.5 | 2023-05-26 | Improper scheme validation from InstantPlay Deeplink in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from G… |
CVE-2023-29092 | Low | 3.1 | 2023-05-09 | An issue was discovered in Exynos Mobile Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and Exynos 1080. Binding of a wrong resource… |
CVE-2023-21511 | Medium | 4.4 | 2023-05-04 | Out-of-bounds Read vulnerability while processing CMD_COLDWALLET_BTC_SET_PRV_UTXO in bc_core trustlet from Samsung Blockchain Keystore prior to version 1.3.12… |
CVE-2023-21510 | Medium | 4.4 | 2023-05-04 | Out-of-bounds Read vulnerability while processing BC_TUI_CMD_UPDATE_SCREEN in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows… |
CVE-2023-21509 | Medium | 6.7 | 2023-05-04 | Out-of-bounds Write vulnerability while processing BC_TUI_CMD_UPDATE_SCREEN in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allow… |
CVE-2023-21508 | Medium | 6.7 | 2023-05-04 | Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1… |
CVE-2023-21507 | Medium | 4.4 | 2023-05-04 | Out-of-bounds Read vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in bc_tui trustlet from Samsung Blockchain Keystore prior to vers… |