Samsung Mobile Samsung Mobile Devices

• CVE-2023-42563 Medium 6.7 Integer overflow vulnerability in landmarkCopyImageToNative of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow. 0.2%
• CVE-2023-42570 Medium 5.9 Improper access control vulnerability in KnoxCustomManagerService prior to SMR Dec-2023 Release 1 allows attacker to access device SIM PIN. 0.2%
• CVE-2023-42569 Medium 4.0 Improper authorization verification vulnerability in AR Emoji prior to SMR Dec-2023 Release 1 allows attackers to read sandbox data of AR Emoji. 0.2%
• CVE-2023-42568 High 7.3 Improper access control vulnerability in SmartManagerCN prior to SMR Dec-2023 Release 1 allows local attackers to access arbitrary files with system privilege. 0.2%
• CVE-2023-42567 High 7.3 Improper size check vulnerability in softsimd prior to SMR Dec-2023 Release 1 allows stack-based buffer overflow. 0.3%
• CVE-2023-42566 High 7.3 Out-of-bound write vulnerability in libsavsvc prior to SMR Dec-2023 Release 1 allows local attackers to execute arbitrary code. 0.3%
• CVE-2023-42565 High 7.3 Improper input validation vulnerability in Smart Clip prior to SMR Dec-2023 Release 1 allows local attackers with shell privilege to execute arbitrary code. 0.2%
• CVE-2023-42564 Medium 6.6 Improper access control in knoxcustom service prior to SMR Dec-2023 Release 1 allows attacker to send broadcast with system privilege. 0.2%
• CVE-2023-42562 Medium 6.7 Integer overflow vulnerability in detectionFindFaceSupportMultiInstance of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow. 0.2%
• CVE-2023-42561 High 7.1 Heap out-of-bounds write vulnerability in bootloader prior to SMR Dec-2023 Release 1 allows a physical attacker to execute arbitrary code. 0.4%
• CVE-2023-42560 High 7.4 Heap out-of-bounds write vulnerability in dec_mono_audb of libsavsac.so prior to SMR Dec-2023 Release 1 allows an attacker to execute arbitrary code. 0.2%
• CVE-2023-42559 Medium 4.9 Improper exception management vulnerability in Knox Guard prior to SMR Dec-2023 Release 1 allows Knox Guard lock bypass via changing system time. 0.3%
• CVE-2023-42558 Medium 6.0 Out of bounds write vulnerability in HDCP in HAL prior to SMR Dec-2023 Release 1 allows attacker to perform code execution. 0.2%
• CVE-2023-42557 Medium 5.6 Out-of-bound write vulnerability in libIfaaCa prior to SMR Dec-2023 Release 1 allows local system attackers to execute arbitrary code. 0.3%
• CVE-2023-42556 Low 3.3 Improper usage of implicit intent in Contacts prior to SMR Dec-2023 Release 1 allows attacker to get sensitive information. 0.2%
• CVE-2023-42538 Medium 5.9 An improper input validation in saped_rec_silence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write. 0.2%
• CVE-2023-42537 High 8.4 An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write. 0.2%
• CVE-2023-42536 High 8.4 An improper input validation in saped_dec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write. 0.2%
• CVE-2023-42535 High 8.4 Out-of-bounds Write in read_block of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code. 0.2%
• CVE-2023-42534 Medium 6.3 Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to read arbitrary files with system privilege. 0.2%
• CVE-2023-42533 Medium 6.6 Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execute arbitrary code in Kernel. 0.4%
• CVE-2023-42532 Medium 5.9 Improper Certificate Validation in FotaAgent prior to SMR Nov-2023 Release1 allows remote attacker to intercept the network traffic including Firmware information. 0.4%
• CVE-2023-42531 Medium 6.2 Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass restrictions on starting activities from the background. 0.2%
• CVE-2023-42530 Medium 6.7 Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct without User Interaction. 0.4%
• CVE-2023-42529 Medium 6.7 Out-of-bound write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to execute arbitrary code. 0.2%
• CVE-2023-42528 Medium 6.7 Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code. 0.2%
• CVE-2023-42527 Medium 5.6 Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to expose sensitive information. 0.2%
• CVE-2023-30739 Medium 6.7 Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code. 0.2%
• CVE-2023-30733 High 7.8 Stack-based Buffer Overflow in vulnerability HDCP trustlet prior to SMR Oct-2023 Release 1 allows local privileged attackers to perform code execution. 0.2%
• CVE-2023-30732 Medium 5.5 Improper access control in system property prior to SMR Oct-2023 Release 1 allows local attacker to get CPU serial number. 0.2%
• CVE-2023-30731 Medium 5.7 Logic error in package installation via debugger command prior to SMR Oct-2023 Release 1 allows physical attacker to install an application that has different build type. 0.2%
• CVE-2023-30727 Medium 6.7 Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi and connect arbitrary Wi-Fi without User Interaction. 0.4%
• CVE-2023-30692 High 8.5 Improper input validation vulnerability in Evaluator prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities. 0.2%
• CVE-2023-30690 High 8.5 Improper input validation vulnerability in Duo prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities. 0.2%
• CVE-2023-30721 Medium 4.4 Insertion of sensitive information into log vulnerability in Locksettings prior to SMR Sep-2023 Release 1 allows a privileged local attacker to get lock screen match information from the log. 0.2%
• CVE-2023-30720 Medium 4.7 PendingIntent hijacking in LmsAssemblyTrackerCTC prior to SMR Sep-2023 Release 1 allows local attacker to gain arbitrary file access. 0.1%
• CVE-2023-30719 Medium 4.0 Exposure of Sensitive Information vulnerability in InboundSmsHandler prior to SMR Sep-2023 Release 1 allows local attackers to access certain message data. 0.2%
• CVE-2023-30718 Medium 4.0 Improper export of android application components vulnerability in WifiApAutoHotspotEnablingActivity prior to SMR Sep-2023 Release 1 allows local attacker to change a Auto Hotspot setting. 0.1%
• CVE-2023-30717 Medium 4.0 Sensitive information exposure vulnerability in SVCAgent prior to SMR Sep-2023 Release 1 allows attackers to get unresettable identifiers. 0.2%
• CVE-2023-30716 Medium 4.0 Improper access control vulnerability in SVCAgent prior to SMR Sep-2023 Release 1 allows attackers to trigger certain commands. 0.2%
• CVE-2023-30715 Medium 4.0 Improper access control vulnerability in Weather prior to SMR Sep-2023 Release 1 allows attackers to access location information set in Weather without permission. 0.2%
• CVE-2023-30714 Medium 4.6 Improper authorization vulnerability in FolderContainerDragDelegate in One UI Home prior to SMR Sep-2023 Release 1 allows physical attackers to change some settings of the folder lock. 0.2%
• CVE-2023-30713 Medium 6.2 Improper privilege management vulnerability in FolderLockNotifier in One UI Home prior to SMR Sep-2023 Release 1 allows local attackers to change some settings of the folder lock. 0.1%
• CVE-2023-30712 Medium 6.8 Improper input validation in Settings Suggestions prior to SMR Sep-2023 Release 1 allows attackers to launch arbitrary activity. 0.2%
• CVE-2023-30711 Medium 4.0 Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider. 0.2%
• CVE-2023-30710 High 8.5 Improper input validation vulnerability in Knox AI prior to SMR Sep-2023 Release 1 allows local attackers to launch privileged activities. 0.2%
• CVE-2023-30709 High 7.9 Improper access control in Dual Messenger prior to SMR Sep-2023 Release 1 allows local attackers launch activity with system privilege. 0.2%
• CVE-2023-30708 Medium 4.6 Improper authentication in SecSettings prior to SMR Sep-2023 Release 1 allows attacker to access Captive Portal Wi-Fi in Reactivation Lock status. 0.6%
• CVE-2023-30707 Medium 4.0 Improper input validation vulnerability in FileProviderStatusReceiver in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows local attackers to delete arbitrary files with Samsung Keyboard privile 0.2%
• CVE-2023-30706 High 7.5 Improper authorization in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows attacker to read arbitrary file with system privilege. 0.5%