samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
Component: samsung_assistant

Improper authorization in PushMsgReceiver of Samsung Assistant prior to version 8.7.00.1 allows attacker to execute javascript interface. To trigger t...

📅 2023-10-04
CVSS 4.4 Dossier →
Component: sassistant

Improper Preservation of Permissions vulnerability in SAssistant prior to version 8.7 allows local attackers to access backup data in SAssistant....

📅 2023-10-04
CVSS 5.1 Dossier →
Component: health

Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via implicit inte...

📅 2023-10-04
CVSS 4.0 Dossier →
Component: android

Stack-based Buffer Overflow in vulnerability HDCP trustlet prior to SMR Oct-2023 Release 1 allows local privileged attackers to perform code execution...

📅 2023-10-04
CVSS 7.8 Dossier →
Component: android

Improper access control in system property prior to SMR Oct-2023 Release 1 allows local attacker to get CPU serial number....

📅 2023-10-04
CVSS 5.5 Dossier →
Component: android

Logic error in package installation via debugger command prior to SMR Oct-2023 Release 1 allows physical attacker to install an application that has d...

📅 2023-10-04
CVSS 5.7 Dossier →
Component: android

Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi and connect arbitrary Wi-Fi with...

📅 2023-10-04
CVSS 6.7 Dossier →
Component: android

Improper input validation vulnerability in Evaluator prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities....

📅 2023-10-04
CVSS 8.5 Dossier →
Component: android

Improper input validation vulnerability in Duo prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities....

📅 2023-10-04
CVSS 8.5 Dossier →
Component: exynos_2200_firmware

Samsung Mobile Processor Exynos 2200 allows a GPU Double Free (issue 1 of 2)....

📅 2023-09-28
CVSS 4.7 Dossier →
Component: exynos_2200_firmware

Samsung Mobile Processor Exynos 2200 allows a GPU Use After Free....

📅 2023-09-21
CVSS 4.7 Dossier →
Component: memory_card_\&_ufd_authentication

A DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software before 1.0.1 could allow a local attacker to escalate pr...

📅 2023-09-18
CVSS 7.3 Dossier →
Component: exynos_9820_firmware

An issue was discovered in the NPU kernel driver in Samsung Exynos Mobile Processor 9820, 980, 2100, 2200, 1280, and 1380. An integer overflow can byp...

📅 2023-09-12
CVSS 2.0 Dossier →
Component: exynos_980_firmware

An issue was discovered in Exynos Mobile Processor 980 and 2100. An integer overflow at a buffer index can prevent the execution of requested services...

📅 2023-09-08
CVSS 2.0 Dossier →
Component: exynos_980_firmware

An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor (Exynos 980, Exynos 850, Exynos 2100, and Exynos W920). Improper han...

📅 2023-09-08
CVSS 2.0 Dossier →
Component: exynos_9810_firmware

An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem (Exynos Mobile Processor, Automotive Processor, and Modem ...

📅 2023-09-08
CVSS 5.9 Dossier →
Component: exynos_9820_firmware

An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem (Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exynos ...

📅 2023-09-08
CVSS 5.3 Dossier →
Component: camera

Implicit intent hijacking vulnerability in Camera prior to versions 11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 12.1.03.10 in Android 12, and 13...

📅 2023-09-06
CVSS 3.3 Dossier →
Component: email

Improper Certificate Validation in Samsung Email prior to version 6.1.82.0 allows remote attacker to intercept the network traffic including sensitive...

📅 2023-09-06
CVSS 8.1 Dossier →
Component: packageinstallerchn

Intent redirection vulnerability in PackageInstallerCHN prior to version 13.1.03.00 allows local attacker to access arbitrary file. This vulnerability...

📅 2023-09-06
CVSS 4.4 Dossier →
Component: gamelauncher

PendingIntent hijacking vulnerability in GameLauncher prior to version 4.2.59.5 allows local attackers to access data....

📅 2023-09-06
CVSS 4.7 Dossier →
Component: gallery

Improper authentication in LocalProvier of Gallery prior to version 14.5.01.2 allows attacker to access the data in content provider....

📅 2023-09-06
CVSS 5.1 Dossier →
Component: gallery

Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows attacker to access search history....

📅 2023-09-06
CVSS 4.0 Dossier →
Component: health

Improper input validation vulnerability in Samsung Health prior to version 6.24.2.011 allows attackers to write arbitrary file with Samsung Health pri...

📅 2023-09-06
CVSS 5.5 Dossier →
Page 33 of 62 (1,475 Total Records)