Samsung

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-40279 1Samsung 1Tizenrt Jun 17, 2026 Sep 29, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). l2_packet_receive_timeout in wpa_supplicant/src/l2_packet/l2_packet_pcap.c has a missing check on the return value of pcap_dispatch, leading to a...Show more An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). l2_packet_receive_timeout in wpa_supplicant/src/l2_packet/l2_packet_pcap.c has a missing check on the return value of pcap_dispatch, leading to a denial of service (malfunction).Show less
CVE-2022-40278 1Samsung 1Tizenrt Jun 17, 2026 Sep 29, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). createDB in security/provisioning/src/provisioningdatabasemanager.c has a missing sqlite3_free after sqlite3_exec, leading to a denial of service.
CVE-2022-40762 1Samsung 1Mtower Jun 17, 2026 Sep 16, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A Memory Allocation with Excessive Size Value vulnerablity in the TEE_Realloc function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_Reallo...Show more A Memory Allocation with Excessive Size Value vulnerablity in the TEE_Realloc function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_Realloc with an excessive number for the parameter len.Show less
CVE-2022-40761 1Samsung 1Mtower Jun 17, 2026 Sep 16, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 The function tee_obj_free in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_AllocateOperation with a disturbed heap layout, related to utee_cry...Show more The function tee_obj_free in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_AllocateOperation with a disturbed heap layout, related to utee_cryp_obj_alloc.Show less
CVE-2022-40760 1Samsung 1Mtower Jun 17, 2026 Sep 16, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A Buffer Access with Incorrect Length Value vulnerablity in the TEE_MACUpdate function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_MACUpd...Show more A Buffer Access with Incorrect Length Value vulnerablity in the TEE_MACUpdate function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_MACUpdate with an excessive size value of chunkSize.Show less
CVE-2022-40759 1Samsung 1Mtower Jun 17, 2026 Sep 16, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A NULL pointer dereference issue in the TEE_MACCompareFinal function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_MACCompareFinal with a N...Show more A NULL pointer dereference issue in the TEE_MACCompareFinal function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_MACCompareFinal with a NULL pointer for the parameter operation.Show less
CVE-2022-40758 1Samsung 1Mtower Jun 17, 2026 Sep 16, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A Buffer Access with Incorrect Length Value vulnerablity in the TEE_CipherUpdate function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_Cip...Show more A Buffer Access with Incorrect Length Value vulnerablity in the TEE_CipherUpdate function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_CipherUpdate with an excessive size value of srcLen.Show less
CVE-2022-40757 1Samsung 1Mtower Jun 17, 2026 Sep 16, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A Buffer Access with Incorrect Length Value vulnerablity in the TEE_MACComputeFinal function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_...Show more A Buffer Access with Incorrect Length Value vulnerablity in the TEE_MACComputeFinal function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_MACComputeFinal with an excessive size value of messageLen.Show less
CVE-2022-39846 1Samsung 1Smart Switch Pc Jun 17, 2026 Sep 9, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 DLL hijacking vulnerability in Smart Switch PC prior to version 4.3.22083_3 allows attacker to execute arbitrary code.
CVE-2022-39845 1Samsung 1Kies Jun 17, 2026 Sep 9, 2022 N/A· v4 7.1 HIGH· v3 N/A· v2 Improper validation of integrity check vulnerability in Samsung Kies prior to version 2.6.4.22074 allows local attackers to delete arbitrary directory using directory junction.
CVE-2022-39844 1Samsung 1Smart Switch Pc Jun 17, 2026 Sep 9, 2022 N/A· v4 7.1 HIGH· v3 N/A· v2 Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.22083 allows local attackers to delete arbitrary directory using directory junction.
CVE-2022-36878 1Samsung 1Find My Mobile Jun 17, 2026 Sep 9, 2022 N/A· v4 3.3 LOW· v3 N/A· v2 Exposure of Sensitive Information in Find My Mobile prior to version 7.2.25.14 allows local attacker to access IMEI via log.
CVE-2022-36877 1Samsung 1Samsung Members Jun 17, 2026 Sep 9, 2022 N/A· v4 3.3 LOW· v3 N/A· v2 Exposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4.3.00.11 in Global and 14.0.02.4 in China allows local attackers to access device identification via log.
CVE-2022-36876 1Samsung 1Samsung Pass Jun 17, 2026 Sep 9, 2022 N/A· v4 2.4 LOW· v3 N/A· v2 Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication.
CVE-2022-36875 1Samsung 1Galaxy Watch Plugin Jun 17, 2026 Sep 9, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Improper restriction of broadcasting Intent in SaWebViewRelayActivity of?Waterplugin prior to version 2.2.11.22081151 allows attacker to access the file without permission.
CVE-2022-36874 1Samsung 1Galaxy Watch Plugin Jun 17, 2026 Sep 9, 2022 N/A· v4 6.2 MEDIUM· v3 N/A· v2 Improper Handling of Insufficient Permissions or Privileges vulnerability in Waterplugin prior to 2.2.11.22040751 allows attacker to access device IMEI and Serial number.
CVE-2022-36873 1Samsung 1Galaxy Watch Plugin Jun 17, 2026 Sep 9, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Improper restriction of broadcasting Intent in GalaxyStoreBridgePageLinker of?Waterplugin prior to version 2.2.11.22081151 leaks MAC address of the connected Bluetooth device.
CVE-2022-36872 1Samsung 2Samsung Pay Samsung Pay Kr Jun 17, 2026 Sep 9, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Pending Intent hijacking vulnerability in SpayNotification in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent.
CVE-2022-36871 1Samsung 2Samsung Pay Samsung Pay Kr Jun 17, 2026 Sep 9, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Pending Intent hijacking vulnerability in NotiCenterUtils in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent.
CVE-2022-36870 1Samsung 2Samsung Pay Samsung Pay Kr Jun 17, 2026 Sep 9, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent.

Previous 1...515253...77 Next