Samsung Mobile Samsung Mobile Devices

• CVE-2022-27830 High 8.5 Improper validation vulnerability in SemBlurInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities. 0.1%
• CVE-2022-27829 High 8.5 Improper validation vulnerability in VerifyCredentialResponse prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities. 0.1%
• CVE-2022-27828 High 8.5 Improper validation vulnerability in MediaMonitorEvent prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities. 0.1%
• CVE-2022-27826 High 8.5 Improper validation vulnerability in SemSuspendDialogInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities. 0.2%
• CVE-2022-27827 High 8.5 Improper validation vulnerability in MediaMonitorDimension prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities. 0.1%
• CVE-2022-27825 Medium 4.0 Improper size check in sapefd_parse_meta_HEADER function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file. 0.2%
• CVE-2022-27824 Medium 4.0 Improper size check of in sapefd_parse_meta_DESCRIPTION function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file 0.3%
• CVE-2022-27823 Medium 4.0 Improper size check in sapefd_parse_meta_HEADER_old function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file. 0.3%
• CVE-2022-27822 Medium 6.6 Information exposure vulnerability in ril property setting prior to SMR April-2022 Release 1 allows access to EF_RUIMID value without permission. 0.1%
• CVE-2022-27821 Medium 4.0 Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of service via crafted image file. 0.3%
• CVE-2022-27576 Low 3.3 Information exposure vulnerability in Samsung DeX Home prior to SMR April-2022 Release 1 allows to access currently launched foreground app information without permission 0.3%
• CVE-2022-27575 Low 3.3 Information exposure vulnerability in One UI Home prior to SMR April-2022 Release 1 allows to access currently launched foreground app information without permission. 0.3%
• CVE-2022-27574 Medium 4.4 Improper input validation vulnerability in parser_iloc and sheifd_find_itemIndexin fuctions of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by privileged attacker. 0.4%
• CVE-2022-27573 Medium 4.4 Improper input validation vulnerability in parser_infe and sheifd_find_itemIndexin fuctions of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by privileged attackers. 0.4%
• CVE-2022-27572 High 8.1 Heap-based buffer overflow vulnerability in parser_ipma function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attackers. 1.4%
• CVE-2022-27571 High 8.1 Heap-based buffer overflow vulnerability in sheifd_get_info_image function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker. 1.4%
• CVE-2022-27570 High 8.1 Heap-based buffer overflow vulnerability in parser_single_iref function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker. 1.4%
• CVE-2022-27569 High 8.1 Heap-based buffer overflow vulnerability in parser_infe function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker. 1.4%
• CVE-2022-27568 High 8.1 Heap-based buffer overflow vulnerability in parser_iloc function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker. 1.4%
• CVE-2022-27567 Medium 5.9 Null pointer dereference vulnerability in parser_hvcC function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attackers. 0.5%
• CVE-2022-26099 Medium 5.9 Null pointer dereference vulnerability in parser_infe function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds read by remote attackers. 0.5%
• CVE-2022-26097 Medium 5.9 Null pointer dereference vulnerability in parser_unknown_property function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker. 0.5%
• CVE-2022-26098 High 8.1 Heap-based buffer overflow vulnerability in sheifd_create function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attackers. 1.4%
• CVE-2022-26096 Medium 5.9 Null pointer dereference vulnerability in parser_ispe function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker. 0.5%
• CVE-2022-26095 Medium 5.9 Null pointer dereference vulnerability in parser_colr function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker. 0.5%
• CVE-2022-26094 Medium 5.9 Null pointer dereference vulnerability in parser_auxC function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker. 0.5%
• CVE-2022-26093 Medium 5.9 Null pointer dereference vulnerability in parser_irot function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker. 0.5%
• CVE-2022-26092 High 7.4 Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows arbitrary code execution. 0.1%
• CVE-2022-26091 Medium 5.7 Improper access control vulnerability in Knox Manage prior to SMR Apr-2022 Release 1 allows that physical attackers can bypass Knox Manage using a function key of hardware keyboard. 0.1%
• CVE-2022-25833 Low 3.3 Improper authentication in ImsService prior to SMR Apr-2022 Release 1 allows attackers to get IMSI without READ_PRIVILEGED_PHONE_STATE permission. 0.1%
• CVE-2022-25832 Medium 4.0 Improper authentication vulnerability in S Secure prior to SMR Apr-2022 Release 1 allows physical attackers to use locked Myfiles app without authentication. 0.1%
• CVE-2022-25831 Low 2.0 Improper access control vulnerability in S Secure prior to SMR Apr-2022 Release 1 allows physical attackers to access secured data in certain conditions. 0.1%
• CVE-2022-25822 Medium 4.0 An use after free vulnerability in sdp driver prior to SMR Mar-2022 Release 1 allows kernel crash. <0.1%
• CVE-2022-25821 Low 3.3 Improper use of SMS buffer pointer in Shannon baseband prior to SMR Mar-2022 Release 1 allows OOB read. 0.1%
• CVE-2022-25820 Medium 4.2 A vulnerable design in fingerprint matching algorithm prior to SMR Mar-2022 Release 1 allows physical attackers to perform brute force attack on screen lock password. 0.1%
• CVE-2022-25818 Medium 6.5 Improper boundary check in UWB stack prior to SMR Mar-2022 Release 1 allows arbitrary code execution. 0.4%
• CVE-2022-25817 Medium 4.0 Improper authentication in One UI Home prior to SMR Mar-2022 Release 1 allows attacker to generate pinned-shortcut without user consent. 0.1%
• CVE-2022-25816 Medium 4.1 Improper authentication in Samsung Lock and mask apps setting prior to SMR Mar-2022 Release 1 allows attacker to change enable/disable without authentication 0.1%
• CVE-2022-25815 Medium 5.5 PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent. 0.1%
• CVE-2022-25814 Medium 5.5 PendingIntent hijacking vulnerability in Wearable Manager Installer prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIn 0.1%
• CVE-2022-24932 Medium 4.2 Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation before finishing Setup wizard. 0.1%
• CVE-2022-24931 High 7.9 Improper access control vulnerability in dynamic receiver in ApkInstaller prior to SMR MAR-2022 Release allows unauthorized attackers to execute arbitrary activity without a proper permission 0.1%
• CVE-2022-24929 Medium 4.1 Unprotected Activity in AppLock prior to SMR Mar-2022 Release 1 allows attacker to change the list of locked app without authentication. 0.1%
• CVE-2022-24928 Medium 5.9 Security misconfiguration of RKP in kernel prior to SMR Mar-2022 Release 1 allows a system not to be protected by RKP. 0.1%
• CVE-2022-24925 Medium 4.4 Improper input validation vulnerability in SettingsProvider prior to Android S(12) allows privileged attackers to trigger a permanent denial of service attack on a victim's devices. 0.3%
• CVE-2022-24001 Low 3.8 Information disclosure vulnerability in Edge Panel prior to Android S(12) allows physical attackers to access screenshot in clipboard via Edge Panel. <0.1%
• CVE-2022-24000 Low 3.9 PendingIntent hijacking vulnerability in DataUsageReminderReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via impl 0.1%
• CVE-2022-23999 Low 3.9 PendingIntent hijacking vulnerability in CpaReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent. 0.1%
• CVE-2022-23429 Medium 5.3 An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory and it leads to application crash. 0.1%
• CVE-2022-23427 Low 3.9 PendingIntent hijacking vulnerability in KnoxPrivacyNoticeReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission via implicit Intent. 0.1%