samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
Component: smartthings

Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive info...

📅 2022-10-07
CVSS 4.0 Dossier →
Component: smartthings

Improper access control vulnerability in RegisteredEventMediator.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive informa...

📅 2022-10-07
CVSS 4.0 Dossier →
Component: smartthings

Improper access control vulnerability in ContentsSharingActivity.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive infor...

📅 2022-10-07
CVSS 4.0 Dossier →
Component: smartthings

Improper access control vulnerability in WifiSetupLaunchHelper in SmartThings prior to version 1.7.89.25 allows attackers to access sensitive informat...

📅 2022-10-07
CVSS 3.3 Dossier →
Component: account

Intent redirection vulnerability in Samsung Account prior to version 13.5.01.3 allows attackers to access content providers without permission....

📅 2022-10-07
CVSS 3.6 Dossier →
Component: dynamic_lockscreen

Improper authorization in Dynamic Lockscreen prior to SMR Sep-2022 Release 1 in Android R(11) and 3.3.03.66 in Android S(12) allows unauthorized use o...

📅 2022-10-07
CVSS 5.3 Dossier →
Component: factorycamera

Unprotected Receiver in AtBroadcastReceiver in FactoryCamera prior to version 3.5.51 allows attackers to record video without camera privilege....

📅 2022-10-07
CVSS 5.9 Dossier →
Component: quick_share

Improper access control vulnerability in QuickShare prior to version 13.2.3.5 allows attackers to access sensitive information via implicit broadcast....

📅 2022-10-07
CVSS 4.4 Dossier →
Component: uphelper_library

Implicit intent hijacking vulnerability in UPHelper library prior to version 3.0.12 allows attackers to access sensitive information via implicit inte...

📅 2022-10-07
CVSS 4.0 Dossier →
Component: factorycamera

Path traversal vulnerability in AtBroadcastReceiver in FactoryCamera prior to version 3.5.51 allows attackers to write arbitrary file as FactoryCamera...

📅 2022-10-07
CVSS 7.3 Dossier →
Component: factorycamerafb

Improper access control vulnerability in CameraTestActivity in FactoryCameraFB prior to version 3.5.51 allows attackers to access broadcasting Intent ...

📅 2022-10-07
CVSS 7.3 Dossier →
Component: tizenrt

An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). l2_packet_receive_timeout in wpa_supplicant/src/l2_packet/l2_packet_pcap.c h...

📅 2022-09-29
CVSS 7.5 Dossier →
Component: tizenrt

An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). createDB in security/provisioning/src/provisioningdatabasemanager.c has a mi...

📅 2022-09-29
CVSS 7.5 Dossier →
Component: mtower

A Memory Allocation with Excessive Size Value vulnerablity in the TEE_Realloc function in Samsung mTower through 0.3.0 allows a trusted application to...

📅 2022-09-16
CVSS 7.5 Dossier →
Component: mtower

The function tee_obj_free in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function T...

📅 2022-09-16
CVSS 7.5 Dossier →
Component: mtower

A Buffer Access with Incorrect Length Value vulnerablity in the TEE_MACUpdate function in Samsung mTower through 0.3.0 allows a trusted application to...

📅 2022-09-16
CVSS 7.5 Dossier →
Component: mtower

A NULL pointer dereference issue in the TEE_MACCompareFinal function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial ...

📅 2022-09-16
CVSS 7.5 Dossier →
Component: mtower

A Buffer Access with Incorrect Length Value vulnerablity in the TEE_CipherUpdate function in Samsung mTower through 0.3.0 allows a trusted application...

📅 2022-09-16
CVSS 7.5 Dossier →
Component: mtower

A Buffer Access with Incorrect Length Value vulnerablity in the TEE_MACComputeFinal function in Samsung mTower through 0.3.0 allows a trusted applicat...

📅 2022-09-16
CVSS 7.5 Dossier →
Component: smart_switch_pc

DLL hijacking vulnerability in Smart Switch PC prior to version 4.3.22083_3 allows attacker to execute arbitrary code....

📅 2022-09-09
CVSS 6.2 Dossier →
Component: kies

Improper validation of integrity check vulnerability in Samsung Kies prior to version 2.6.4.22074 allows local attackers to delete arbitrary directory...

📅 2022-09-09
CVSS 5.5 Dossier →
Component: smart_switch_pc

Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.22083 allows local attackers to delete arbitrary director...

📅 2022-09-09
CVSS 5.5 Dossier →
Component: find_my_mobile

Exposure of Sensitive Information in Find My Mobile prior to version 7.2.25.14 allows local attacker to access IMEI via log....

📅 2022-09-09
CVSS 3.3 Dossier →
Component: samsung_members

Exposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4.3.00.11 in Global and 14.0.02.4 in China allows lo...

📅 2022-09-09
CVSS 2.8 Dossier →
Page 43 of 62 (1,475 Total Records)