Samsung: Security Vulnerabilities
Improper access control vulnerability in Quick Share prior to 13.5.52.0 allows local attacker to access local files.
CVSS Score
5.5
EPSS Score
0.002
Published
2023-11-07
An improper input validation in saped_rec_silence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.
CVSS Score
5.9
EPSS Score
0.002
Published
2023-11-07
PendingIntent hijacking vulnerability in ChallengeNotificationManager in Samsung Health prior to version 6.25 allows local attackers to access data.
CVSS Score
4.7
EPSS Score
0.002
Published
2023-11-07
Improper access control vulnerability in Samsung Account prior to version 14.5.01.1 allows attackers to access sensitive information via implicit intent.
CVSS Score
4.0
EPSS Score
0.002
Published
2023-11-07
Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id.
CVSS Score
4.0
EPSS Score
0.004
Published
2023-11-07
An improper input validation in saped_dec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.
CVSS Score
8.4
EPSS Score
0.002
Published
2023-11-07
An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.
CVSS Score
8.4
EPSS Score
0.002
Published
2023-11-07
Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to read arbitrary files with system privilege.
CVSS Score
6.3
EPSS Score
0.002
Published
2023-11-07
Out-of-bounds Write in read_block of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code.
CVSS Score
8.4
EPSS Score
0.002
Published
2023-11-07
Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execute arbitrary code in Kernel.
CVSS Score
6.6
EPSS Score
0.004
Published
2023-11-07