Samsung Mobile Samsung Mobile Devices

• CVE-2023-21430 Medium 4.4 An out-of-bound read vulnerability in mapToBuffer function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR JAN-2023 Release 1 allows attacker to cause memory access fault. 0.2%
• CVE-2023-21419 Medium 4.3 An improper implementation logic in Secure Folder prior to SMR Jan-2023 Release 1 allows the Secure Folder container remain unlocked under certain condition. 0.2%
• CVE-2023-21426 Medium 4.3 Hardcoded AES key to encrypt cardemulation PINs in NFC prior to SMR Jan-2023 Release 1 allows attackers to access cardemulation PIN. 0.2%
• CVE-2023-21427 Medium 5.4 Improper access control vulnerability in NfcTile prior to SMR Jan-2023 Release 1 allows to attacker to use NFC without user recognition. 0.3%
• CVE-2023-21421 Medium 5.9 Improper Handling of Insufficient Permissions or Privileges vulnerability in KnoxCustomManagerService prior to SMR Jan-2023 Release 1 allows attacker to access device SIM PIN. 0.2%
• CVE-2022-39904 Low 3.3 Exposure of Sensitive Information vulnerability in Samsung Settings prior to SMR Dec-2022 Release 1 allows local attackers to access the Network Access Identifier via log. 0.1%
• CVE-2022-39899 Medium 5.7 Improper authentication vulnerability in Samsung WindowManagerService prior to SMR Dec-2022 Release 1 allows attacker to send the input event using S Pen gesture. 0.1%
• CVE-2022-39905 Medium 4.0 Implicit intent hijacking vulnerability in Telecom application prior to SMR Dec-2022 Release 1 allows attacker to access sensitive information via implicit intent. 0.1%
• CVE-2022-39902 Medium 6.5 Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call. 0.8%
• CVE-2022-39913 Medium 6.8 Exposure of Sensitive Information to an Unauthorized Actor in Persona Manager prior to Android T(13) allows local attacker to access user profiles information. 0.1%
• CVE-2022-39903 Medium 4.0 Improper access control vulnerability in RCS call prior to SMR Dec-2022 Release 1 allows local attackers to access RCS incoming call number. 0.1%
• CVE-2022-39906 Low 2.3 Improper access control vulnerability in SecTelephonyProvider prior to SMR Dec-2022 Release 1 allows attackers to access message information. 0.1%
• CVE-2022-39914 Medium 4.0 Exposure of Sensitive Information from an Unauthorized Actor vulnerability in Samsung DisplayManagerService prior to Android T(13) allows local attacker to access connected DLNA device information. 0.1%
• CVE-2022-39894 Medium 4.0 Improper access control vulnerability in ContactListStartActivityHelper in Phone prior to SMR Dec-2022 Release 1 allows to access sensitive information via implicit intent. 0.1%
• CVE-2022-39907 Medium 6.9 Integer overflow vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attacker to perform Out-Of-Bounds Write. 0.1%
• CVE-2022-39908 Medium 6.9 TOCTOU vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attacker to perform Out-Of-Bounds Write. 0.1%
• CVE-2022-39895 Medium 4.0 Improper access control vulnerability in ContactListUtils in Phone prior to SMR Dec-2022 Release 1 allows to access contact group information via implicit intent. 0.1%
• CVE-2022-39896 Medium 4.0 Improper access control vulnerabilities in Contacts prior to SMR Dec-2022 Release 1 allows to access sensitive information via implicit intent. 0.1%
• CVE-2022-39901 Medium 6.5 Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network traffic encryption between UE and gNodeB. 0.3%
• CVE-2022-39898 Medium 4.0 Improper access control vulnerability in IIccPhoneBook prior to SMR Dec-2022 Release 1 allows attackers to access some information of usim. 0.1%
• CVE-2022-39897 Medium 4.4 Exposure of Sensitive Information vulnerability in kernel prior to SMR Dec-2022 Release 1 allows attackers to access the kernel address information via log. 0.1%
• CVE-2022-39912 Medium 6.2 Improper handling of insufficient permissions vulnerability in setSecureFolderPolicy in PersonaManagerService prior to Android T(13) allows local attackers to set some setting value in Secure folder. 0.1%
• CVE-2022-39900 Medium 4.6 Improper access control vulnerability in Nice Catch prior to SMR Dec-2022 Release 1 allows physical attackers to access contents of all toast generated in the application installed in Secure Folder th 0.2%
• CVE-2022-39880 High 7.1 Improper input validation vulnerability in DualOutFocusViewer prior to SMR Nov-2022 Release 1 allows local attacker to perform an arbitrary code execution. 0.1%
• CVE-2022-39886 Medium 5.9 Improper access control vulnerability in IpcRxServiceModeBigDataInfo in RIL prior to SMR Nov-2022 Release 1 allows local attacker to access Device information. <0.1%
• CVE-2022-39883 Medium 4.0 Improper authorization vulnerability in StorageManagerService prior to SMR Nov-2022 Release 1 allows local attacker to call privileged API. <0.1%
• CVE-2022-39885 Medium 5.9 Improper access control vulnerability in BootCompletedReceiver_CMCC in DeviceManagement prior to SMR Nov-2022 Release 1 allows local attacker to access to Device information. <0.1%
• CVE-2022-39887 Medium 4.3 Improper access control vulnerability in clearAllGlobalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows local attacker to configure EDM setting. <0.1%
• CVE-2022-39881 Medium 5.3 Improper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR Sep-2022 Release allows remote attacker to read out of bounds memory. 1.0%
• CVE-2022-39882 High 8.0 Heap overflow vulnerability in sflacf_fal_bytes_peek function in libsmat.so library prior to SMR Nov-2022 Release 1 allows local attacker to execute arbitrary code. 0.1%
• CVE-2022-39879 Medium 5.9 Improper authorization vulnerability in?CallBGProvider prior to SMR Nov-2022 Release 1 allows local attacker to grant permission for accessing information with phone uid. <0.1%
• CVE-2022-39884 Medium 4.3 Improper access control vulnerability in IImsService prior to SMR Nov-2022 Release 1 allows local attacker to access to Call information. <0.1%
• CVE-2022-39848 Medium 4.0 Exposure of sensitive information in AT_Distributor prior to SMR Oct-2022 Release 1 allows local attacker to access SerialNo via log. 0.1%
• CVE-2022-39849 Unrated Improper access control in knox_vpn_policy service prior to SMR Oct-2022 Release 1 allows allows unauthorized read of configuration data. 0.1%
• CVE-2022-39862 Medium 5.3 Improper authorization in Dynamic Lockscreen prior to SMR Sep-2022 Release 1 in Android R(11) and 3.3.03.66 in Android S(12) allows unauthorized use of javascript interface api. 0.6%
• CVE-2022-39852 High 8.0 A heap-based overflow vulnerability in makeContactAGIF in libagifencoder.quram.so library prior to SMR Oct-2022 Release 1 allows attacker to perform code execution. 0.2%
• CVE-2022-39850 Unrated Improper access control in mum_container_policy service prior to SMR Oct-2022 Release 1 allows allows unauthorized read of configuration data. 0.1%
• CVE-2022-39856 Medium 4.0 Improper access control vulnerability in imsservice application prior to SMR Oct-2022 Release 1 allows local attackers to access call information. 0.1%
• CVE-2022-39855 Medium 5.1 Improper access control vulnerability in FACM application prior to SMR Oct-2022 Release 1 allows a local attacker to connect arbitrary AP and Bluetooth devices. 0.1%
• CVE-2022-39847 Medium 4.9 Use after free vulnerability in set_nft_pid and signal_handler function of NFC driver prior to SMR Oct-2022 Release 1 allows attackers to perform malicious actions. <0.1%
• CVE-2022-39853 Medium 4.4 A use after free vulnerability in perf-mgr driver prior to SMR Oct-2022 Release 1 allows attacker to cause memory access fault. 0.1%
• CVE-2022-39851 Medium 4.0 Improper access control vulnerability in CocktailBarService prior to SMR Oct-2022 Release 1 allows local attacker to bind service that require BIND_REMOTEVIEWS permission. 0.1%
• CVE-2022-39854 Medium 6.4 Improper protection in IOMMU prior to SMR Oct-2022 Release 1 allows unauthorized access to secure memory. 0.1%
• CVE-2022-36868 Medium 5.9 Improper restriction of broadcasting Intent in MouseNKeyHidDevice prior to SMR Oct-2022 Release 1 leaks MAC address of the connected Bluetooth device. 0.1%
• CVE-2022-36855 Medium 4.4 A use after free vulnerability in iva_ctl driver prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault. 0.1%
• CVE-2022-36857 Low 1.9 Improper Authorization vulnerability in Photo Editor prior to SMR Sep-2022 Release 1 allows physical attackers to read internal application data. 0.1%
• CVE-2022-36850 Medium 4.0 Path traversal vulnerability in CallBGProvider prior to SMR Sep-2022 Release 1 allows attacker to overwrite arbitrary file with phone uid. 0.1%
• CVE-2022-36856 Medium 4.0 Improper access control vulnerability in Telecom application prior to SMR Sep-2022 Release 1 allows attacker to start emergency calls via undefined permission. <0.1%
• CVE-2022-36852 Low 1.9 Improper Authorization vulnerability in Video Editor prior to SMR Sep-2022 Release 1 allows local attacker to access internal application data. 0.1%
• CVE-2022-36861 Medium 5.9 Custom permission misuse vulnerability in SystemUI prior to SMR Sep-2022 Release 1 allows attacker to use some protected functions with SystemUI privilege. <0.1%