Advisories · Technology
Samsung Mobile Devices.
Every CVE that names Samsung Mobile Devices among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Heap-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 7.2 High
Stack-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 4.4 Medium
Double free in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 4.1 Medium
An information disclosure vulnerability in Widevine TA log prior to SMR Oct-2021 Release 1 allows attackers to bypass the ASLR protection mechanism in TEE.
- Samsung Mobile Devices
- CWE-1295
- CVSS 3.9 Low
Heap-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 4.4 Medium
Improper handling of exceptional conditions in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-755
- CVSS 4.4 Medium
Improper handling of exceptional conditions in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-755
- CVSS 4.0 Medium
An improper access control vulnerability in BluetoothSettingsProvider prior to SMR Oct-2021 Release 1 allows untrusted application to overwrite some Bluetooth information.
- Samsung Mobile Devices
- CWE-264
- CVSS 3.7 Low
Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
- CVSS 7.9 High
Code injection in Samsung Mobile Devices
- Samsung Mobile Devices
- Code injection
- CVSS 6.0 Medium
Buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 4.4 Medium
Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
- CVSS 5.3 Medium
Buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 3.3 Low
NULL pointer dereference in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 4.0 Medium
Buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 4.0 Medium
Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
- CVSS 4.0 Medium
Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
- CVSS 3.3 Low
NULL pointer dereference in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 5.9 Medium
Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
- CVSS 5.5 Medium
Out-of-bounds read in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 3.3 Low
Out-of-bounds read in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 3.1 Low
Out-of-bounds read in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 5.1 Medium
Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
- CVSS 5.5 Medium
Path traversal in Samsung Mobile Devices
- Samsung Mobile Devices
- Path traversal
- CVSS 3.3 Low
Improper authentication in Samsung Mobile Devices
- Samsung Mobile Devices
- Authentication bypass
- CVSS 4.5 Medium
Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
- CVSS 6.5 Medium
Heap-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
-
Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
-
Expired pointer dereference in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
-
Improper authentication in Samsung Mobile Devices
- Samsung Mobile Devices
- Authentication bypass
-
Improper privilege management in Samsung Mobile Devices
- Samsung Mobile Devices
- Privilege escalation
-
Improper privilege management in Samsung Mobile Devices
- Samsung Mobile Devices
- Privilege escalation
-
SQL injection in Samsung Mobile Devices
- Samsung Mobile Devices
- SQL injection
-
Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
- CVSS 6.8 Medium
Exported Android component in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-926
- CVSS 6.7 Medium
Out-of-bounds write in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 6.4 MediumCritical · KEVKEV
Race condition in Samsung Mobile Devices
- Samsung Mobile Devices
- Race condition
- CVSS 6.4 MediumCritical · KEVKEV
Use after free in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 6.6 Medium
Code injection in Samsung Mobile Devices
- Samsung Mobile Devices
- Code injection
- CVSS 4.0 Medium
Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
- CVSS 4.0 Medium
Exported Android component in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-926
- CVSS 4.0 Medium
Exported Android component in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-926
- CVSS 2.3 Low
Improper authentication in Samsung Mobile Devices
- Samsung Mobile Devices
- Authentication bypass
- CVSS 7.1 High
Exported Android component in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-926
- CVSS 9.0 CriticalCritical · CVSS 9+
Heap-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 9.0 CriticalCritical · CVSS 9+
Stack-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 9.0 CriticalCritical · CVSS 9+
Stack-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 9.0 CriticalCritical · CVSS 9+
Heap-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 9.0 CriticalCritical · CVSS 9+
Heap-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
-
Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
-
Code injection in Samsung Mobile Devices
- Samsung Mobile Devices
- Code injection
-
Code injection in Samsung Mobile Devices
- Samsung Mobile Devices
- Code injection
-
Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
-
Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
-
Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
-
Code injection in Samsung Mobile Devices
- Samsung Mobile Devices
- Code injection
-
Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
-
Improper access in Notification setting prior to SMR JUN-2021 Release 1 allows physically proximate attackers to set arbitrary notification via physically configuring device.
- Samsung Mobile Devices
- CWE-703
-
Out-of-bounds write in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
-
Out-of-bounds write in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption