Security Vulnerabilities - CVEs Published In December 2023
Improper usage of implicit intent in Contacts prior to SMR Dec-2023 Release 1 allows attacker to get sensitive information.
CVSS Score
3.3
EPSS Score
0.002
Published
2023-12-05
Out-of-bound write vulnerability in libIfaaCa prior to SMR Dec-2023 Release 1 allows local system attackers to execute arbitrary code.
CVSS Score
5.6
EPSS Score
0.003
Published
2023-12-05
Out of bounds write vulnerability in HDCP in HAL prior to SMR Dec-2023 Release 1 allows attacker to perform code execution.
CVSS Score
6.0
EPSS Score
0.002
Published
2023-12-05
Improper exception management vulnerability in Knox Guard prior to SMR Dec-2023 Release 1 allows Knox Guard lock bypass via changing system time.
CVSS Score
4.9
EPSS Score
0.003
Published
2023-12-05
Heap out-of-bounds write vulnerability in dec_mono_audb of libsavsac.so prior to SMR Dec-2023 Release 1 allows an attacker to execute arbitrary code.
CVSS Score
7.4
EPSS Score
0.002
Published
2023-12-05
Heap out-of-bounds write vulnerability in bootloader prior to SMR Dec-2023 Release 1 allows a physical attacker to execute arbitrary code.
CVSS Score
7.1
EPSS Score
0.004
Published
2023-12-05
Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.
CVSS Score
8.4
EPSS Score
0.002
Published
2023-12-05
Transient DOS in WLAN Firmware while processing a FTMR frame.
CVSS Score
7.5
EPSS Score
0.005
Published
2023-12-05
Transient DOS while parsing WPA IES, when it is passed with length more than expected size.
CVSS Score
7.5
EPSS Score
0.005
Published
2023-12-05
CVE-2023-33106
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
Known exploited
CVSS Score
8.4
EPSS Score
0.008
Published
2023-12-05