samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
Component: internet

Improper Authorization vulnerability in Samsung Internet prior to version 22.0.0.35 allows physical attacker access downloaded files in Secret Mode wi...

📅 2023-08-10
CVSS 3.8 Dossier →
Component: members

Improper URL validation vulnerability in Samsung Members prior to version 14.0.07.1 allows attackers to access sensitive information....

📅 2023-08-10
CVSS 3.3 Dossier →
Component: galaxy_book_go_firmware

Stack overflow vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" in Windows Update ...

📅 2023-08-10
CVSS 6.7 Dossier →
Component: android

PendingIntent hijacking in WifiGeofenceManager prior to SMR Aug-2023 Release 1 allows local attacker to arbitrary file access....

📅 2023-08-10
CVSS 4.7 Dossier →
Component: android

PendingIntent hijacking vulnerability in SemWifiApTimeOutImpl in framework prior to SMR Aug-2023 Release 1 allows local attackers to access ContentPro...

📅 2023-08-10
CVSS 5.3 Dossier →
Component: android

Out-of-bounds write vulnerability in parser_hvcC function of libsimba library prior to SMR Aug-2023 Release 1 allows code execution by remote attacker...

📅 2023-08-10
CVSS 7.5 Dossier →
Component: android

Improper access control vulnerability in TelephonyUI prior to SMR Aug-2023 Release 1 allows local attacker to connect BLE without privilege....

📅 2023-08-10
CVSS 5.5 Dossier →
Component: android

An improper input validation in IpcTxCfgSetSimlockPayload in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write....

📅 2023-08-10
CVSS 4.4 Dossier →
Component: android

An improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write....

📅 2023-08-10
CVSS 4.4 Dossier →
Component: galaxy_book_go_firmware

Out-of-bounds Write vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" in Windows Up...

📅 2023-08-10
CVSS 6.7 Dossier →
Component: android

Out-of-bounds Write in IpcTxPcscTransmitApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code....

📅 2023-08-10
CVSS 6.7 Dossier →
Component: android

Out-of-bounds Write in DoOemFactorySendFactoryBypassCommand of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary c...

📅 2023-08-10
CVSS 6.7 Dossier →
Component: android

Parcel mismatch in AuthenticationConfig prior to SMR Aug-2023 Release 1 allows local attacker to privilege escalation....

📅 2023-08-10
CVSS 8.4 Dossier →
Component: android

Out-of-bounds Write in BuildOemEmbmsGetSigStrengthResponse of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary co...

📅 2023-08-10
CVSS 6.7 Dossier →
Component: android

Out-of-bounds Write in MakeUiccAuthForOem of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code....

📅 2023-08-10
CVSS 6.7 Dossier →
Component: android

Out-of-bounds Write in RmtUimApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code....

📅 2023-08-10
CVSS 6.7 Dossier →
Component: android

Out-of-bounds Write in ReqDataRaw of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code....

📅 2023-08-10
CVSS 6.7 Dossier →
Component: android

Improper access control vulnerability in Telecom prior to SMR Aug-2023 Release 1 allows local attakcers to change TTY mode....

📅 2023-08-10
CVSS 4.3 Dossier →
Component: android

Improper access control in Samsung Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call acceptRingingCall API without permission....

📅 2023-08-10
CVSS 4.3 Dossier →
Component: android

Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call endCall API without permission....

📅 2023-08-10
CVSS 4.3 Dossier →
Component: android

Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call silenceRinger API without permission....

📅 2023-08-10
CVSS 4.3 Dossier →
Component: android

An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release 1 allows attacker to cause out-...

📅 2023-08-10
CVSS 4.4 Dossier →
Component: android

Improper privilege management vulnerability in MMIGroup prior to SMR Aug-2023 Release 1 allows code execution with privilege....

📅 2023-08-10
CVSS 8.4 Dossier →
Component: android

Improper access control in HDCP trustlet prior to SMR Aug-2023 Release 1 allows local attackers to execute arbitrary code....

📅 2023-08-10
CVSS 7.8 Dossier →
Page 35 of 62 (1,475 Total Records)