Samsung: Security Vulnerabilities
Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local attackers to write out-of-bounds memory.
CVSS Score
5.9
EPSS Score
0.002
Published
2024-07-02
Improper access control in launchFullscreenIntent of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities.
CVSS Score
7.8
EPSS Score
0.001
Published
2024-07-02
Improper verification of signature in FilterProvider prior to SMR Jul-2024 Release 1 allows local attackers to execute privileged behaviors. User interaction is required for triggering this vulnerability.
CVSS Score
6.5
EPSS Score
0.001
Published
2024-07-02
Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows local attackers to trigger memory corruption.
CVSS Score
6.1
EPSS Score
0.002
Published
2024-07-02
Improper handling of exceptional conditions in Secure Folder prior to SMR Jul-2024 Release 1 allows physical attackers to bypass authentication under certain condition. User interaction is required for triggering this vulnerability.
CVSS Score
4.3
EPSS Score
0.002
Published
2024-07-02
Improper access control in Dar service prior to SMR Jul-2024 Release 1 allows local attackers to bypass restriction for calling SDP features.
CVSS Score
7.7
EPSS Score
0.001
Published
2024-07-02
Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.
CVSS Score
5.5
EPSS Score
0.001
Published
2024-07-02
Improper access control in OneUIHome prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability.
CVSS Score
7.8
EPSS Score
0.002
Published
2024-07-02
Improper authentication in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to pair with devices.
CVSS Score
5.9
EPSS Score
0.002
Published
2024-07-02
Improper input validation in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to trigger abnormal behavior.
CVSS Score
5.3
EPSS Score
0.002
Published
2024-07-02