Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Release: Samsung Mobile Devices SMR Feb-2022 Release 1 Clear all filters
TI-2022-07962 CVE-2022-24000 · GHSA-qw6q-58hh-mm88

Improper input validation in Samsung Mobile Devices

Priority LOW 17

PendingIntent hijacking vulnerability in DataUsageReminderReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent.

CVSS 3.1LOW 3.9 Local Low privileges User interaction EPSS 0.00116 Published 2022-02-11 Fixed in SMR Feb-2022 Release 1 CWE-20
TI-2022-07961 CVE-2022-23999 · GHSA-vq48-pc75-gmr2

Improper input validation in Samsung Mobile Devices

Priority LOW 17

PendingIntent hijacking vulnerability in CpaReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent.

CVSS 3.1LOW 3.9 Local Low privileges User interaction EPSS 0.00116 Published 2022-02-11 Fixed in SMR Feb-2022 Release 1 CWE-20
TI-2022-07493 CVE-2022-23429 · GHSA-f446-pfcr-84xv

Out-of-bounds read in Samsung Mobile Devices

Priority LOW 23

An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory and it leads to application crash.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.001 Published 2022-02-11 Fixed in SMR Feb-2022 Release 1 CWE-125
TI-2022-07491 CVE-2022-23427 · GHSA-5g7j-2c29-qqwf

Improper input validation in Samsung Mobile Devices

Priority LOW 30

PendingIntent hijacking vulnerability in KnoxPrivacyNoticeReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission via implicit Intent.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.001 Published 2022-02-11 Fixed in SMR Feb-2022 Release 1 CWE-20
TI-2022-07490 CVE-2022-23426 · GHSA-5jhj-mc2q-6vxw

Code injection in Samsung Mobile Devices

Priority LOW 26

A vulnerability using PendingIntent in DeX Home and DeX for PC prior to SMR Feb-2022 Release 1 allows attackers to access files with system privilege.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00105 Published 2022-02-11 Fixed in SMR Feb-2022 Release 1 CWE-94
TI-2022-07489 CVE-2022-23425 · GHSA-2j2j-ch6x-37m4

Improper input validation in Samsung Mobile Devices

Priority MEDIUM 42

Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with fake base station.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00409 Published 2022-02-11 Fixed in SMR Feb-2022 Release 1 CWE-20