samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
Component: exynos_2200_firmware

A vulnerability was discovered in Samsung Mobile Processors Exynos 2200 and Exynos 2400 where they lack a check for the validation of native handles, ...

๐Ÿ“… 2024-07-09
CVSS 6.2 Dossier →
Component: exynos_modem_5300_firmware

A vulnerability in Samsung Exynos Modem 5300 allows a Man-in-the-Middle (MITM) attacker to downgrade the security mode of packets going to the victim,...

๐Ÿ“… 2024-07-09
CVSS 5.3 Dossier →
Component: exynos_1280_firmware

A vulnerability was discovered in Samsung Mobile Processors Exynos 1280, Exynos 2200, Exynos 1330, Exynos 1380, and Exynos 2400 where they do not prop...

๐Ÿ“… 2024-07-09
CVSS 4.4 Dossier →
Component: exynos_850_firmware

A vulnerability was discovered in Samsung Mobile Processors Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, ...

๐Ÿ“… 2024-07-09
CVSS 6.0 Dossier →
Component: android

Improper access control in Samsung Message prior to SMR Jul-2024 Release 1 allows local attackers to access location data....

๐Ÿ“… 2024-07-08
CVSS 4.0 Dossier →
Component: android

Use of implicit intent for sensitive communication in Samsung Messages prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive informa...

๐Ÿ“… 2024-07-08
CVSS 3.3 Dossier →
Component: galaxy_store

Improper verification of intent by broadcast receiver vulnerability in GalaxyStore prior to version 4.5.81.0 allows local attackers to launch unexport...

๐Ÿ“… 2024-07-02
CVSS 5.9 Dossier →
Component: flow

Improper verification of intent by broadcast receiver vulnerability in Samsung Flow prior to version 4.9.13.0 allows local attackers to copy image fil...

๐Ÿ“… 2024-07-02
CVSS 4.4 Dossier →
Component: tips

Improper input validation in Tips prior to version 6.2.9.4 in Android 14 allows local attacker to send broadcast with Tips' privilege....

๐Ÿ“… 2024-07-02
CVSS 4.0 Dossier →
Component: health

Improper input validation in Samsung Health prior to version 6.27.0.113 allows local attackers to write arbitrary document files to the sandbox of Sam...

๐Ÿ“… 2024-07-02
CVSS 4.4 Dossier →
Component: smartthings

Improper authentication in SmartThings prior to version 1.8.17 allows remote attackers to bypass the expiration date for members set by the owner....

๐Ÿ“… 2024-07-02
CVSS 5.9 Dossier →
Component: android

Improper access control in clickAdapterItem of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities....

๐Ÿ“… 2024-07-02
CVSS 7.8 Dossier →
Component: android

Exposure of sensitive information in proc file system prior to SMR Jul-2024 Release 1 allows local attackers to read kernel memory address....

๐Ÿ“… 2024-07-02
CVSS 5.5 Dossier →
Component: android

Improper input validation in parsing and distributing RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbi...

๐Ÿ“… 2024-07-02
CVSS 7.5 Dossier →
Component: android

Improper input validation in parsing RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial...

๐Ÿ“… 2024-07-02
CVSS 5.3 Dossier →
Component: android

Improper input validation in parsing an item data from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigge...

๐Ÿ“… 2024-07-02
CVSS 5.3 Dossier →
Component: android

Improper input validationํ˜ปin parsing an item type from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigge...

๐Ÿ“… 2024-07-02
CVSS 5.3 Dossier →
Component: android

Improper input validation in parsing RTCP RR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial o...

๐Ÿ“… 2024-07-02
CVSS 5.3 Dossier →
Component: android

Improper input validationํ˜ปin parsing RTCP SR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial o...

๐Ÿ“… 2024-07-02
CVSS 5.3 Dossier →
Component: android

Improper input validation in parsing application information from RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to ...

๐Ÿ“… 2024-07-02
CVSS 7.5 Dossier →
Component: android

Improper access control in KnoxCustomManagerService prior to SMR Jul-2024 Release 1 allows local attackers to configure Knox privacy policy....

๐Ÿ“… 2024-07-02
CVSS 5.9 Dossier →
Component: android

Improper access control in launchApp of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities....

๐Ÿ“… 2024-07-02
CVSS 7.8 Dossier →
Component: android

Improper access control in system property prior to SMR Jul-2024 Release 1 allows local attackers to get device identifier....

๐Ÿ“… 2024-07-02
CVSS 4.0 Dossier →
Component: android

Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local attackers to write out-of-bounds me...

๐Ÿ“… 2024-07-02
CVSS 5.9 Dossier →
Page 24 of 62 (1,475 Total Records)