CVE-2024-34617Medium 4.0Improper handling of insufficient permission in Telephony prior to SMR Aug-2024 Release 1 allows local attackers to configure default Message application.0.1%
CVE-2024-34616Medium 5.1Improper handling of insufficient permission in KnoxDualDARPolicy prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive data.0.1%
CVE-2024-34615Medium 5.1Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to cause memory corruption.0.1%
CVE-2024-34614High 7.3Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code.0.2%
CVE-2024-34613Medium 4.0Improper access control in Galaxy Watch prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive information of Galaxy watch.0.1%
CVE-2024-34612High 7.3Out-of-bound write in libcodec2secmp4vdec.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code.0.2%
CVE-2024-34611Medium 5.1Improper access control in KnoxService prior to SMR Aug-2024 Release 1 allows local attackers to get sensitive information.0.1%
CVE-2024-34610Medium 5.1Improper access control in ExtControlDeviceService prior to SMR Aug-2024 Release 1 allows local attackers to access protected data.0.1%
CVE-2024-34609Medium 6.2Improper access control in VoiceNoteService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.0.1%
CVE-2024-34608Medium 6.2Improper access control in PaymentManagerService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.0.1%
CVE-2024-34607Medium 6.2Improper access control in SamsungNotesService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.0.1%
CVE-2024-34606Medium 6.2Improper access control in SmartThingsService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.0.1%
CVE-2024-34605Medium 6.2Improper access control in SamsungHealthService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.0.1%
CVE-2024-34604Medium 6.2Improper access control in LedCoverService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.0.1%
CVE-2024-34603Medium 4.0Improper access control in Samsung Message prior to SMR Jul-2024 Release 1 allows local attackers to access location data.0.1%
CVE-2024-34602Low 3.3Use of implicit intent for sensitive communication in Samsung Messages prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information. User interaction is required for triggering 0.2%
CVE-2024-34595High 7.8Improper access control in clickAdapterItem of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities.0.2%
CVE-2024-34594Medium 5.5Exposure of sensitive information in proc file system prior to SMR Jul-2024 Release 1 allows local attackers to read kernel memory address.0.2%
CVE-2024-34593High 7.5Improper input validation in parsing and distributing RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction0.6%
CVE-2024-34592Medium 5.3Improper input validation in parsing RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for trig0.4%
CVE-2024-34591Medium 5.3Improper input validation in parsing an item data from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is0.4%
CVE-2024-34590Medium 5.3Improper input validation혻in parsing an item type from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is0.4%
CVE-2024-34589Medium 5.3Improper input validation in parsing RTCP RR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for trigge0.4%
CVE-2024-34588Medium 5.3Improper input validation혻in parsing RTCP SR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for trigge0.4%
CVE-2024-34587High 7.5Improper input validation in parsing application information from RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User0.5%
CVE-2024-34586Medium 5.9Improper access control in KnoxCustomManagerService prior to SMR Jul-2024 Release 1 allows local attackers to configure Knox privacy policy.0.1%
CVE-2024-34585High 7.8Improper access control in launchApp of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities.0.1%
CVE-2024-34583Medium 4.0Improper access control in system property prior to SMR Jul-2024 Release 1 allows local attackers to get device identifier.0.1%
CVE-2024-20901Medium 5.9Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local attackers to write out-of-bounds memory.0.2%
CVE-2024-20900Medium 4.0Improper authentication in MTP application prior to SMR Jul-2024 Release 1 allows local attackers to enter MTP mode without proper authentication.0.1%
CVE-2024-20899Medium 4.0Use of implicit intent for sensitive communication in RCS function in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.0.1%
CVE-2024-20898Medium 4.0Use of implicit intent for sensitive communication in SoftphoneClient in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.0.1%
CVE-2024-20897Medium 4.0Use of implicit intent for sensitive communication in FCM function in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.0.1%
CVE-2024-20896Medium 5.5Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.0.1%
CVE-2024-20895High 7.7Improper access control in Dar service prior to SMR Jul-2024 Release 1 allows local attackers to bypass restriction for calling SDP features.0.1%
CVE-2024-20894Medium 4.3Improper handling of exceptional conditions in Secure Folder prior to SMR Jul-2024 Release 1 allows physical attackers to bypass authentication under certain condition. User interaction is required fo0.2%
CVE-2024-20893Medium 6.1Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows local attackers to trigger memory corruption.0.2%
CVE-2024-20892Medium 6.5Improper verification of signature in FilterProvider prior to SMR Jul-2024 Release 1 allows local attackers to execute privileged behaviors. User interaction is required for triggering this vulnerabil0.1%
CVE-2024-20891High 7.8Improper access control in launchFullscreenIntent of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities.0.1%
CVE-2024-20890Medium 5.3Improper input validation in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to trigger abnormal behavior.0.2%
CVE-2024-20889Medium 5.9Improper authentication in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to pair with devices.0.2%
CVE-2024-20888High 7.8Improper access control in OneUIHome prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability.0.2%
CVE-2024-20885Medium 5.1Improper component protection vulnerability in Samsung Dialer prior to SMR May-2024 Release 1 allows local attackers to make a call without proper permission.0.1%
CVE-2024-20884Medium 6.2Incorrect use of privileged API vulnerability in getSemBatteryUsageStats in BatteryStatsService prior to SMR Jun-2024 Release 1 allows local attackers to use privileged API.0.1%
CVE-2024-20883Medium 6.2Incorrect use of privileged API vulnerability in registerBatteryStatsCallback in BatteryStatsService prior to SMR Jun-2024 Release 1 allows local attackers to use privileged API.0.1%
CVE-2024-20882Medium 4.6Out-of-bounds read vulnerability in bootloader prior to SMR June-2024 Release 1 allows physical attackers to arbitrary data access.0.2%
CVE-2024-20881Medium 6.4Improper input validation vulnerability in chnactiv TA prior to SMR Jun-2024 Release 1 allows local privileged attackers lead to potential arbitrary code execution.0.2%
CVE-2024-20880Medium 6.4Stack-based buffer overflow vulnerability in bootloader prior to SMR Jun-2024 Release 1 allows physical attackers to overwrite memory.0.2%
CVE-2024-20879Medium 4.0Improper input validation vulnerability in libsavscmn.so prior to SMR Jun-2024 Release 1 allows local attackers to write out-of-bounds memory.0.1%
CVE-2024-20878High 7.3Heap out-of-bound write vulnerability in parsing grid image in libsavscmn.so prior to SMR June-2024 Release 1 allows local attackers to execute arbitrary code.0.2%