Advisories · Technology

Samsung Mobile Devices.

Every CVE that names Samsung Mobile Devices among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-30650 CVE record

CVSS 6.7 Medium

Out of bounds read and write in callrunTspCmd of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.
- Samsung Mobile Devices
Not analysed yet 6 Jul 2023
CVE-2023-30649 CVE record

CVSS 7.8 High

Heap out of bound write vulnerability in RmtUimNeedApdu of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code.
- Samsung Mobile Devices
Not analysed yet 6 Jul 2023
CVE-2023-30648 CVE record

CVSS 3.3 Low

Stack out-of-bounds write vulnerability in IpcRxImeiUpdateImeiNoti of RILD priro to SMR Jul-2023 Release 1 cause a denial of service on the system.
- Samsung Mobile Devices
Not analysed yet 6 Jul 2023
CVE-2023-30647 CVE record

CVSS 7.8 High

Heap out of bound write vulnerability in IpcRxUsimPhoneBookCapa of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code.
- Samsung Mobile Devices
Not analysed yet 6 Jul 2023
CVE-2023-30646 CVE record

CVSS 7.8 High

Heap out of bound write vulnerability in BroadcastSmsConfig of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code.
- Samsung Mobile Devices
Not analysed yet 6 Jul 2023
CVE-2023-30645 CVE record

CVSS 7.8 High

Heap out of bound write vulnerability in IpcRxIncomingCBMsg of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code.
- Samsung Mobile Devices
Not analysed yet 6 Jul 2023
CVE-2023-30644 CVE record

CVSS 7.8 High

Stack out of bound write vulnerability in CdmaSmsParser of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code.
- Samsung Mobile Devices
Not analysed yet 6 Jul 2023
CVE-2023-30643 CVE record

CVSS 7.7 High

Missing authentication vulnerability in Galaxy Themes Service prior to SMR Jul-2023 Release 1 allows local attackers to delete arbitrary non-preloaded applications.
- Samsung Mobile Devices
Not analysed yet 6 Jul 2023
CVE-2023-30642 CVE record

CVSS 6.2 Medium

Improper privilege management vulnerability in Galaxy Themes Service prior to SMR Jul-2023 Release 1 allows local attackers to call privilege function.
- Samsung Mobile Devices
Not analysed yet 6 Jul 2023
CVE-2023-30641 CVE record

CVSS 4.3 Medium

Improper access control vulnerability in Settings prior to SMR Jul-2023 Release 1 allows physical attacker to use restricted user profile to access device owner's google account data.
- Samsung Mobile Devices
Not analysed yet 6 Jul 2023
CVE-2023-30640 CVE record

CVSS 4.3 Medium

Improper access control vulnerability in PersonaManagerService prior to SMR Jul-2023 Release 1 allows local attackers to change confiugration.
- Samsung Mobile Devices
Not analysed yet 6 Jul 2023
CVE-2023-21517 CVE record

CVSS 8.8 High

Buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 28 Jun 2023
CVE-2023-21513 CVE record

CVSS 6.1 Medium

Improper privilege management in Samsung Mobile Devices
- Samsung Mobile Devices
- Privilege escalation
- Broken access control
Not analysed yet 28 Jun 2023
CVE-2023-21512 CVE record

CVSS 2.4 Low

Improper privilege management in Samsung Mobile Devices
- Samsung Mobile Devices
- Privilege escalation
Not analysed yet 28 Jun 2023
CVE-2023-21504 CVE record

CVSS 5.6 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 4 May 2023
CVE-2023-21503 CVE record

CVSS 5.6 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 4 May 2023
CVE-2023-21502 CVE record

CVSS 5.7 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 4 May 2023
CVE-2023-21501 CVE record

CVSS 8.2 High

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 4 May 2023
CVE-2023-21500 CVE record

CVSS 6.0 Medium

Double free in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 4 May 2023
CVE-2023-21499 CVE record

CVSS 8.2 High

Out-of-bounds write in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 4 May 2023
CVE-2023-21498 CVE record

CVSS 6.0 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 4 May 2023
CVE-2023-21497 CVE record

CVSS 4.4 Medium

Uncontrolled format string in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 4 May 2023
CVE-2023-21496 CVE record

CVSS 6.1 Medium

Active debug code in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-489
Not analysed yet 4 May 2023
CVE-2023-21495 CVE record

CVSS 4.0 Medium

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 4 May 2023
CVE-2023-21494 CVE record

CVSS 5.6 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 4 May 2023
CVE-2023-21493 CVE record

CVSS 6.8 Medium

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 4 May 2023
CVE-2023-21492 CVE record

CVSS 4.4 MediumCritical · KEVKEV

Sensitive information in log files in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 4 May 2023
CVE-2023-21491 CVE record

CVSS 8.5 High

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 4 May 2023
CVE-2023-21490 CVE record

CVSS 4.7 Medium

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 4 May 2023
CVE-2023-21489 CVE record

CVSS 7.1 High

Out-of-bounds write in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 4 May 2023
CVE-2023-21488 CVE record

CVSS 4.4 Medium

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 4 May 2023
CVE-2023-21487 CVE record

CVSS 5.1 Medium

Improper authentication in Samsung Mobile Devices
- Samsung Mobile Devices
- Authentication bypass
Not analysed yet 4 May 2023
CVE-2023-21486 CVE record

CVSS 5.3 Medium

Exported Android component in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-926
Not analysed yet 4 May 2023
CVE-2023-21485 CVE record

CVSS 5.3 Medium

Exported Android component in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-926
Not analysed yet 4 May 2023
CVE-2023-21484 CVE record

CVSS 5.1 Medium

Improper authentication in Samsung Mobile Devices
- Samsung Mobile Devices
- Authentication bypass
Not analysed yet 4 May 2023
CVE-2023-21461 CVE record

CVSS 4.0 Medium

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 16 Mar 2023
CVE-2023-21460 CVE record

CVSS 4.4 Medium

Improper authentication in Samsung Mobile Devices
- Samsung Mobile Devices
- Authentication bypass
Not analysed yet 16 Mar 2023
CVE-2023-21459 CVE record

CVSS 5.0 Medium

Use after free vulnerability in decon driver prior to SMR Mar-2023 Release 1 allows attackers to cause memory access fault.
- Samsung Mobile Devices
Not analysed yet 16 Mar 2023
CVE-2023-21458 CVE record

CVSS 6.2 Medium

Improper privilege management in Samsung Mobile Devices
- Samsung Mobile Devices
- Privilege escalation
Not analysed yet 16 Mar 2023
CVE-2023-21457 CVE record

CVSS 4.1 Medium

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 16 Mar 2023
CVE-2023-21456 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Path traversal in Samsung Mobile Devices
- Samsung Mobile Devices
- Path traversal
Not analysed yet 16 Mar 2023
CVE-2023-21455 CVE record

CVSS 5.9 Medium

Improper authentication in Samsung Mobile Devices
- Samsung Mobile Devices
- Authentication bypass
Not analysed yet 16 Mar 2023
CVE-2023-21454 CVE record

CVSS 2.4 Low

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 16 Mar 2023
CVE-2023-21453 CVE record

CVSS 6.0 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 16 Mar 2023
CVE-2023-21452 CVE record

CVSS 3.3 Low

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 16 Mar 2023
CVE-2023-21449 CVE record

CVSS 4.0 Medium

Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 16 Mar 2023
CVE-2023-21451 CVE record

CVSS 6.7 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 9 Feb 2023
CVE-2023-21440 CVE record

CVSS 6.2 Medium

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 9 Feb 2023
CVE-2023-21439 CVE record

CVSS 8.5 High

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 9 Feb 2023
CVE-2023-21438 CVE record

CVSS 2.1 Low

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 9 Feb 2023
CVE-2023-21437 CVE record

CVSS 4.0 Medium

Improper authentication in Samsung Mobile Devices
- Samsung Mobile Devices
- Authentication bypass
Not analysed yet 9 Feb 2023
CVE-2023-21436 CVE record

CVSS 3.3 Low

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 9 Feb 2023
CVE-2023-21435 CVE record

CVSS 4.4 Medium

Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 9 Feb 2023
CVE-2023-21430 CVE record

CVSS 4.4 Medium

Out-of-bounds read in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 9 Feb 2023
CVE-2023-21429 CVE record

CVSS 4.0 Medium

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 9 Feb 2023
CVE-2023-21428 CVE record

CVSS 4.0 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 9 Feb 2023
CVE-2023-21427 CVE record

CVSS 5.4 Medium

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 9 Feb 2023
CVE-2023-21426 CVE record

CVSS 4.3 Medium

Hard-coded credentials in Samsung Mobile Devices
- Samsung Mobile Devices
- Hard-coded credentials
Not analysed yet 9 Feb 2023
CVE-2023-21425 CVE record

CVSS 4.3 Medium

Improper authentication in Samsung Mobile Devices
- Samsung Mobile Devices
- Authentication bypass
Not analysed yet 9 Feb 2023
CVE-2023-21424 CVE record

CVSS 5.1 Medium

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 9 Feb 2023