Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

21 records

TI-2022-17070 CVE-2022-36855 · GHSA-x7g8-97jm-3vpj

Use after free in Samsung Mobile Devices

Priority LOW 33

A use after free vulnerability in iva_ctl driver prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00106 Published 2022-09-09 Fixed in SMR Sep-2022 Release 1 CWE-416
Priority LOW 11

Improper Authorization vulnerability in Photo Editor prior to SMR Sep-2022 Release 1 allows physical attackers to read internal application data.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00144 Published 2022-09-09 Fixed in SMR Sep-2022 Release 1 CWE-285
Priority LOW 20

Path traversal vulnerability in CallBGProvider prior to SMR Sep-2022 Release 1 allows attacker to overwrite arbitrary file with phone uid.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00108 Published 2022-09-09 Fixed in SMR Sep-2022 Release 1 CWE-20
Priority LOW 25

Custom permission misuse vulnerability in SystemUI prior to SMR Sep-2022 Release 1 allows attacker to use some protected functions with SystemUI privilege.

CVSS 3.1MEDIUM 5.9 Local No auth No interaction EPSS 0.0009 Published 2022-09-09 Fixed in SMR Sep-2022 Release 1 CWE-269
Priority LOW 17

Improper access control vulnerability in Telecom application prior to SMR Sep-2022 Release 1 allows attacker to start emergency calls via undefined permission.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.0009 Published 2022-09-09 Fixed in SMR Sep-2022 Release 1 CWE-284
Priority LOW 15

Improper Authorization vulnerability in Video Editor prior to SMR Sep-2022 Release 1 allows local attacker to access internal application data.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00106 Published 2022-09-09 Fixed in SMR Sep-2022 Release 1 CWE-285
Priority LOW 23

Improper Authorization vulnerability in setDualDARPolicyCmd prior to SMR Sep-2022 Release 1 allows local attackers to cause local permanent denial of service.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00079 Published 2022-09-09 Fixed in SMR Sep-2022 Release 1 CWE-285
Priority LOW 33

A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc() function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00106 Published 2022-09-09 Fixed in SMR Sep-2022 Release 1 CWE-122
Priority LOW 24

Out of bound read in libapexjni.media.samsung.so prior to SMR Sep-2022 Release 1 allows attacker access unauthorized information.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00099 Published 2022-09-09 Fixed in SMR Sep-2022 Release 1 CWE-20
Priority LOW 33

A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00106 Published 2022-09-09 Fixed in SMR Sep-2022 Release 1 CWE-122
Priority LOW 33

A heap-based overflow vulnerability in HWR::EngineCJK::Impl::Construct() in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00106 Published 2022-09-09 Fixed in SMR Sep-2022 Release 1 CWE-122
Priority LOW 33

A heap-based overflow vulnerability in LoadEnvironment function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00106 Published 2022-09-09 Fixed in SMR Sep-2022 Release 1 CWE-122
Priority LOW 33

A heap-based overflow vulnerability in ConstructDictionary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00106 Published 2022-09-09 Fixed in SMR Sep-2022 Release 1 CWE-122
Priority LOW 33

A heap-based overflow vulnerability in HWR::EngJudgeModel::Construct() in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00106 Published 2022-09-09 Fixed in SMR Sep-2022 Release 1 CWE-122
Priority LOW 33

A heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00106 Published 2022-09-09 Fixed in SMR Sep-2022 Release 1 CWE-122
Priority LOW 33

A heap-based overflow vulnerability in prepareRecogLibrary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00106 Published 2022-09-09 Fixed in SMR Sep-2022 Release 1 CWE-122
TI-2022-17064 CVE-2022-36849 · GHSA-fr26-pfff-8v8q

Use after free in Samsung Mobile Devices

Priority LOW 33

Use after free vulnerability in sdp_mm_set_process_sensitive function of sdpmm driver prior to SMR Sep-2022 Release 1 allows attackers to perform malicious actions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00094 Published 2022-09-09 Fixed in SMR Sep-2022 Release 1 CWE-416
TI-2022-17062 CVE-2022-36847 · GHSA-45h9-jxvf-g96w

Use after free in Samsung Mobile Devices

Priority LOW 33

Use after free vulnerability in mtp_send_signal function of MTP driver prior to SMR Sep-2022 Release 1 allows attackers to perform malicious actions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00094 Published 2022-09-09 Fixed in SMR Sep-2022 Release 1 CWE-416
Priority LOW 33

A heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00106 Published 2022-09-09 Fixed in SMR Sep-2022 Release 1 CWE-122
Priority LOW 33

A heap-based overflow vulnerability in PrepareRecogLibrary_Part function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00106 Published 2022-09-09 Fixed in SMR Sep-2022 Release 1 CWE-122