Security Vulnerabilities
Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information.
CVSS Score
5.1
EPSS Score
0.001
Published
2026-09-09
Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity.
CVSS Score
6.9
EPSS Score
0.001
Published
2026-09-09
Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege.
CVSS Score
8.4
EPSS Score
0.001
Published
2026-09-09
Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.
CVSS Score
9.3
EPSS Score
0.001
Published
2026-09-09
Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.
CVSS Score
6.8
EPSS Score
0.002
Published
2026-09-09
Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code.
CVSS Score
7.1
EPSS Score
0.001
Published
2026-09-09
Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVSS Score
4.8
EPSS Score
0.001
Published
2026-09-09
Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVSS Score
4.8
EPSS Score
0.001
Published
2026-09-09
Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege.
CVSS Score
8.8
EPSS Score
0.003
Published
2026-09-09
Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVSS Score
5.6
EPSS Score
0.001
Published
2026-09-09