Advisories · Technology

Samsung Mobile Devices.

Every CVE that names Samsung Mobile Devices among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-21423 CVE record

CVSS 5.1 Medium

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 9 Feb 2023
CVE-2023-21422 CVE record

CVSS 5.7 Medium

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 9 Feb 2023
CVE-2023-21421 CVE record

CVSS 5.9 Medium

Improper Handling of Insufficient Permissions or Privileges vulnerability in KnoxCustomManagerService prior to SMR Jan-2023 Release 1 allows attacker to access device SIM PIN.
- Samsung Mobile Devices
- CWE-280
Not analysed yet 9 Feb 2023
CVE-2023-21420 CVE record

CVSS 7.3 High

Uncontrolled format string in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 9 Feb 2023
CVE-2023-21419 CVE record

CVSS 4.3 Medium

Improper authentication in Samsung Mobile Devices
- Samsung Mobile Devices
- Authentication bypass
Not analysed yet 9 Feb 2023
CVE-2022-39914 CVE record

CVSS 4.0 Medium

Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 8 Dec 2022
CVE-2022-39913 CVE record

CVSS 6.8 Medium

Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 8 Dec 2022
CVE-2022-39912 CVE record

CVSS 6.2 Medium

Improper handling of insufficient permissions vulnerability in setSecureFolderPolicy in PersonaManagerService prior to Android T(13) allows local attackers to set some setting value in Secure folder.
- Samsung Mobile Devices
- CWE-280
Not analysed yet 8 Dec 2022
CVE-2022-39908 CVE record

CVSS 6.9 Medium

Time-of-check time-of-use race condition in Samsung Mobile Devices
- Samsung Mobile Devices
- Race condition
Not analysed yet 8 Dec 2022
CVE-2022-39907 CVE record

CVSS 6.9 Medium

Integer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 8 Dec 2022
CVE-2022-39906 CVE record

CVSS 2.3 Low

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 8 Dec 2022
CVE-2022-39905 CVE record

CVSS 4.0 Medium

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 8 Dec 2022
CVE-2022-39904 CVE record

CVSS 3.3 Low

Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 8 Dec 2022
CVE-2022-39903 CVE record

CVSS 4.0 Medium

Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 8 Dec 2022
CVE-2022-39902 CVE record

CVSS 6.5 Medium

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 8 Dec 2022
CVE-2022-39901 CVE record

CVSS 6.5 Medium

Improper authentication in Samsung Mobile Devices
- Samsung Mobile Devices
- Authentication bypass
Not analysed yet 8 Dec 2022
CVE-2022-39900 CVE record

CVSS 4.6 Medium

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 8 Dec 2022
CVE-2022-39899 CVE record

CVSS 5.7 Medium

Improper authentication in Samsung Mobile Devices
- Samsung Mobile Devices
- Authentication bypass
Not analysed yet 8 Dec 2022
CVE-2022-39898 CVE record

CVSS 4.0 Medium

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 8 Dec 2022
CVE-2022-39897 CVE record

CVSS 4.4 Medium

Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 8 Dec 2022
CVE-2022-39896 CVE record

CVSS 4.0 Medium

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 8 Dec 2022
CVE-2022-39895 CVE record

CVSS 4.0 Medium

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 8 Dec 2022
CVE-2022-39894 CVE record

CVSS 4.0 Medium

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 8 Dec 2022
CVE-2022-39887 CVE record

CVSS 4.3 Medium

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 9 Nov 2022
CVE-2022-39886 CVE record

CVSS 5.9 Medium

Improper access control vulnerability in IpcRxServiceModeBigDataInfo in RIL prior to SMR Nov-2022 Release 1 allows local attacker to access Device information.
- Samsung Mobile Devices
- CWE-280
Not analysed yet 9 Nov 2022
CVE-2022-39885 CVE record

CVSS 5.9 Medium

Improper access control vulnerability in BootCompletedReceiver_CMCC in DeviceManagement prior to SMR Nov-2022 Release 1 allows local attacker to access to Device information.
- Samsung Mobile Devices
- CWE-280
Not analysed yet 9 Nov 2022
CVE-2022-39884 CVE record

CVSS 4.3 Medium

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 9 Nov 2022
CVE-2022-39883 CVE record

CVSS 4.0 Medium

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 9 Nov 2022
CVE-2022-39882 CVE record

CVSS 8.0 High

Out-of-bounds write in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 9 Nov 2022
CVE-2022-39881 CVE record

CVSS 5.3 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 9 Nov 2022
CVE-2022-39880 CVE record

CVSS 7.1 High

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 9 Nov 2022
CVE-2022-39879 CVE record

CVSS 5.9 Medium

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 9 Nov 2022
CVE-2022-39862 CVE record

CVSS 5.3 Medium

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 7 Oct 2022
CVE-2022-39856 CVE record

CVSS 4.0 Medium

Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 7 Oct 2022
CVE-2022-39855 CVE record

CVSS 5.1 Medium

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 7 Oct 2022
CVE-2022-39854 CVE record

CVSS 6.4 Medium

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 7 Oct 2022
CVE-2022-39853 CVE record

CVSS 4.4 Medium

Use after free in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 7 Oct 2022
CVE-2022-39852 CVE record

CVSS 8.0 High

Heap-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 7 Oct 2022
CVE-2022-39851 CVE record

CVSS 4.0 Medium

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 7 Oct 2022
CVE-2022-39850 CVE record

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 7 Oct 2022
CVE-2022-39849 CVE record

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 7 Oct 2022
CVE-2022-39848 CVE record

CVSS 4.0 Medium

Exposure of sensitive information in AT_Distributor prior to SMR Oct-2022 Release 1 allows local attacker to access SerialNo via log.
- Samsung Mobile Devices
- CWE-213
Not analysed yet 7 Oct 2022
CVE-2022-39847 CVE record

CVSS 4.9 Medium

Use after free in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 7 Oct 2022
CVE-2022-36868 CVE record

CVSS 5.9 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 7 Oct 2022
CVE-2022-36855 CVE record

CVSS 4.4 Medium

Use after free in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 9 Sept 2022
CVE-2022-36857 CVE record

CVSS 1.9 Low

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 9 Sept 2022
CVE-2022-36850 CVE record

CVSS 4.0 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 9 Sept 2022
CVE-2022-36861 CVE record

CVSS 5.9 Medium

Improper privilege management in Samsung Mobile Devices
- Samsung Mobile Devices
- Privilege escalation
Not analysed yet 9 Sept 2022
CVE-2022-36856 CVE record

CVSS 4.0 Medium

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 9 Sept 2022
CVE-2022-36853 CVE record

CVSS 3.3 Low

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 9 Sept 2022
CVE-2022-36852 CVE record

CVSS 1.9 Low

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 9 Sept 2022
CVE-2022-36848 CVE record

CVSS 5.1 Medium

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 9 Sept 2022
CVE-2022-36858 CVE record

CVSS 4.4 Medium

Heap-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 9 Sept 2022
CVE-2022-36854 CVE record

CVSS 4.0 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 9 Sept 2022
CVE-2022-36863 CVE record

CVSS 4.4 Medium

Heap-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 9 Sept 2022
CVE-2022-36862 CVE record

CVSS 4.4 Medium

Heap-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 9 Sept 2022
CVE-2022-36860 CVE record

CVSS 4.4 Medium

Heap-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 9 Sept 2022
CVE-2022-36846 CVE record

CVSS 4.4 Medium

Heap-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 9 Sept 2022
CVE-2022-36844 CVE record

CVSS 4.4 Medium

Heap-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 9 Sept 2022
CVE-2022-36843 CVE record

CVSS 4.4 Medium

Heap-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 9 Sept 2022