Samsung
samsung
1,506 CVEs • 2,866 products
Products (2,866)
Click to collapseToggle
Products (2,866)
Click to collapse
CVEs (1,506)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct without User Interaction. |
Out-of-bound write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to execute arbitrary code. |
Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code. |
Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to expose sensitive information. |
Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code. |
1Samsung 4Galaxy Book Firmware Galaxy Book Odyssey FirmwareGalaxy Book Pro 360 Firmware+1 moreNov 21, 2024 Oct 4, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 and Galaxy Book Odyssey allows local attacker to execute SMM memory corruption. |
Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via implicit intent. |
Improper authorization in PushMsgReceiver of Samsung Assistant prior to version 8.7.00.1 allows attacker to execute javascript interface. To trigger this vulnerability, user interaction is required. |
Improper Preservation of Permissions vulnerability in SAssistant prior to version 8.7 allows local attackers to access backup data in SAssistant. |
Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via implicit intent. |
Stack-based Buffer Overflow in vulnerability HDCP trustlet prior to SMR Oct-2023 Release 1 allows local privileged attackers to perform code execution. |
Improper access control in system property prior to SMR Oct-2023 Release 1 allows local attacker to get CPU serial number. |
Logic error in package installation via debugger command prior to SMR Oct-2023 Release 1 allows physical attacker to install an application that has different build type. |
Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi and connect arbitrary Wi-Fi without User Interaction. |
Improper input validation vulnerability in Evaluator prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities. |
Improper input validation vulnerability in Duo prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities. |
Samsung Mobile Processor Exynos 2200 allows a GPU Double Free (issue 1 of 2). |
Samsung Mobile Processor Exynos 2200 allows a GPU Use After Free. |
1Samsung 1Memory Card & Ufd Authentication Mar 6, 2025 Sep 18, 2023 N/A· v4 7.3 HIGH· v3 N/A· v2 A DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software before 1.0.1 could allow a local attacker to escalate privileges. (An attacker must already have user privileges on Windows to...Show more |
1Samsung 6Exynos 1280 Firmware Exynos 1380 FirmwareExynos 2100 Firmware+3 moreNov 21, 2024 Sep 12, 2023 N/A· v4 3.3 LOW· v3 N/A· v2 An issue was discovered in the NPU kernel driver in Samsung Exynos Mobile Processor 9820, 980, 2100, 2200, 1280, and 1380. An integer overflow can bypass detection of error cases via a crafted application. |