Advisories · Technology

Samsung Mobile Devices.

Every CVE that names Samsung Mobile Devices among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-36842 CVE record

CVSS 4.4 Medium

Heap-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 9 Sept 2022
CVE-2022-36849 CVE record

CVSS 4.9 Medium

Use after free in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 9 Sept 2022
CVE-2022-36847 CVE record

CVSS 4.9 Medium

Use after free in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 9 Sept 2022
CVE-2022-36845 CVE record

CVSS 4.4 Medium

Heap-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 9 Sept 2022
CVE-2022-36841 CVE record

CVSS 4.4 Medium

Heap-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 9 Sept 2022
CVE-2022-33720 CVE record

CVSS 2.4 Low

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 5 Aug 2022
CVE-2022-33730 CVE record

CVSS 6.8 Medium

Out-of-bounds write in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 5 Aug 2022
CVE-2022-33719 CVE record

CVSS 8.6 High

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 5 Aug 2022
CVE-2022-33724 CVE record

CVSS 3.3 Low

Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 5 Aug 2022
CVE-2022-33726 CVE record

CVSS 3.3 Low

Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activity.
- Samsung Mobile Devices
- CWE-561
Not analysed yet 5 Aug 2022
CVE-2022-33722 CVE record

CVSS 4.0 Medium

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 5 Aug 2022
CVE-2022-33721 CVE record

CVSS 4.4 Medium

Code injection in Samsung Mobile Devices
- Samsung Mobile Devices
- Code injection
Not analysed yet 5 Aug 2022
CVE-2022-33732 CVE record

CVSS 6.2 Medium

Improper authentication in Samsung Mobile Devices
- Samsung Mobile Devices
- Authentication bypass
Not analysed yet 5 Aug 2022
CVE-2022-33731 CVE record

CVSS 5.1 Medium

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 5 Aug 2022
CVE-2022-33714 CVE record

CVSS 6.2 Medium

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 5 Aug 2022
CVE-2022-33718 CVE record

CVSS 6.2 Medium

Incorrect authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 5 Aug 2022
CVE-2022-33715 CVE record

CVSS 5.3 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 5 Aug 2022
CVE-2022-33725 CVE record

CVSS 4.0 Medium

Code injection in Samsung Mobile Devices
- Samsung Mobile Devices
- Code injection
Not analysed yet 5 Aug 2022
CVE-2022-33717 CVE record

CVSS 4.4 Medium

A missing input validation before memory read in SEM TA prior to SMR Aug-2022 Release 1 allows local attackers to read out of bound memory.
- Samsung Mobile Devices
Not analysed yet 5 Aug 2022
CVE-2022-33716 CVE record

CVSS 2.3 Low

Use of uninitialized variable in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 5 Aug 2022
CVE-2022-33728 CVE record

CVSS 4.0 Medium

Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 5 Aug 2022
CVE-2022-33729 CVE record

CVSS 5.9 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 5 Aug 2022
CVE-2022-33727 CVE record

CVSS 4.8 Medium

Clickjacking in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-1021
Not analysed yet 5 Aug 2022
CVE-2022-33723 CVE record

CVSS 4.8 Medium

Clickjacking in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-1021
Not analysed yet 5 Aug 2022
CVE-2022-33704 CVE record

CVSS 8.5 High

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 11 Jul 2022
CVE-2022-33703 CVE record

CVSS 8.5 High

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 11 Jul 2022
CVE-2022-33702 CVE record

CVSS 6.2 Medium

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 11 Jul 2022
CVE-2022-33701 CVE record

CVSS 3.3 Low

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 11 Jul 2022
CVE-2022-33700 CVE record

CVSS 2.0 Low

Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 11 Jul 2022
CVE-2022-33699 CVE record

CVSS 2.0 Low

Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 11 Jul 2022
CVE-2022-33698 CVE record

CVSS 3.3 Low

Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 11 Jul 2022
CVE-2022-33697 CVE record

CVSS 3.3 Low

Sensitive information in log files in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 11 Jul 2022
CVE-2022-33696 CVE record

CVSS 4.0 Medium

Exposure of Sensitive Information in Telephony service prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log.
- Samsung Mobile Devices
- CWE-213
Not analysed yet 11 Jul 2022
CVE-2022-33695 CVE record

CVSS 5.1 Medium

Incorrect permission assignment in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 11 Jul 2022
CVE-2022-33694 CVE record

CVSS 4.0 Medium

Exposure of Sensitive Information in CSC application prior to SMR Jul-2022 Release 1 allows local attacker to access wifi information via unprotected intent broadcasting.
- Samsung Mobile Devices
- CWE-213
Not analysed yet 11 Jul 2022
CVE-2022-33693 CVE record

CVSS 2.0 Low

Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 11 Jul 2022
CVE-2022-33692 CVE record

CVSS 4.0 Medium

Exposure of Sensitive Information in Messaging application prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log.
- Samsung Mobile Devices
- CWE-213
Not analysed yet 11 Jul 2022
CVE-2022-33691 CVE record

CVSS 6.2 Medium

Time-of-check time-of-use race condition in Samsung Mobile Devices
- Samsung Mobile Devices
- Race condition
Not analysed yet 11 Jul 2022
CVE-2022-33690 CVE record

CVSS 4.0 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 11 Jul 2022
CVE-2022-33689 CVE record

CVSS 6.2 Medium

Improper authentication in Samsung Mobile Devices
- Samsung Mobile Devices
- Authentication bypass
Not analysed yet 11 Jul 2022
CVE-2022-33688 CVE record

CVSS 3.3 Low

Sensitive information in log files in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 11 Jul 2022
CVE-2022-33687 CVE record

CVSS 3.3 Low

Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 11 Jul 2022
CVE-2022-33686 CVE record

CVSS 2.3 Low

Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 11 Jul 2022
CVE-2022-33685 CVE record

CVSS 4.0 Medium

Unprotected dynamic receiver in Wearable Manager Service prior to SMR Jul-2022 Release 1 allows attacker to launch arbitray activity and access senstive information.
- Samsung Mobile Devices
- CWE-561
Not analysed yet 11 Jul 2022
CVE-2022-30758 CVE record

CVSS 4.0 Medium

Incorrect default permissions in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 11 Jul 2022
CVE-2022-30757 CVE record

CVSS 4.0 Medium

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 11 Jul 2022
CVE-2022-30756 CVE record

CVSS 8.5 High

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 11 Jul 2022
CVE-2022-30755 CVE record

CVSS 7.3 High

Improper authentication in Samsung Mobile Devices
- Samsung Mobile Devices
- Authentication bypass
Not analysed yet 11 Jul 2022
CVE-2022-30754 CVE record

CVSS 8.5 High

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 11 Jul 2022
CVE-2022-30753 CVE record

CVSS 3.3 Low

Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 11 Jul 2022
CVE-2022-30752 CVE record

CVSS 3.3 Low

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 11 Jul 2022
CVE-2022-30751 CVE record

CVSS 3.3 Low

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 11 Jul 2022
CVE-2022-30750 CVE record

CVSS 3.3 Low

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 11 Jul 2022
CVE-2022-30728 CVE record

CVSS 1.9 Low

Information exposure vulnerability in ScanPool prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information.
- Samsung Mobile Devices
- CWE-213
Not analysed yet 7 Jun 2022
CVE-2022-30727 CVE record

CVSS 6.2 Medium

Improper handling of insufficient permissions vulnerability in addAppPackageNameToAllowList in PersonaManagerService prior to SMR Jun-2022 Release 1 allows local attackers to set some setting value i…
- Samsung Mobile Devices
- CWE-280
Not analysed yet 7 Jun 2022
CVE-2022-30726 CVE record

CVSS 6.2 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 7 Jun 2022
CVE-2022-30725 CVE record

CVSS 4.0 Medium

Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in sendIntentSessionError function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of t…
- Samsung Mobile Devices
- CWE-280
Not analysed yet 7 Jun 2022
CVE-2022-30724 CVE record

CVSS 4.0 Medium

Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in sendIntentSessionCompleted function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address…
- Samsung Mobile Devices
- CWE-280
Not analysed yet 7 Jun 2022
CVE-2022-30723 CVE record

CVSS 4.0 Medium

Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in activateVoiceRecognitionWithDevice function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC…
- Samsung Mobile Devices
- CWE-280
Not analysed yet 7 Jun 2022
CVE-2022-30722 CVE record

CVSS 6.2 Medium

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 7 Jun 2022