Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Release: Samsung Mobile Devices SMR Dec-2021 Release 1 Clear all filters
TI-2021-07758 CVE-2021-25519 · GHSA-3j2x-7h4w-pgjq

Information disclosure in Samsung Mobile Devices

Priority LOW 17

An improper access control vulnerability in CPLC prior to SMR Dec-2021 Release 1 allows local attackers to access CPLC information without permission.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00096 Published 2021-12-08 Fixed in SMR Dec-2021 Release 1 CWE-200
TI-2021-07757 CVE-2021-25518 · GHSA-pv7r-v4qc-v4gq

Memory corruption in Samsung Mobile Devices

Priority LOW 28

An improper boundary check in secure_log of LDFW and BL31 prior to SMR Dec-2021 Release 1 allows arbitrary memory write and code execution.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00115 Published 2021-12-08 Fixed in SMR Dec-2021 Release 1 CWE-119
TI-2021-07756 CVE-2021-25517 · GHSA-3vp4-6x9x-47fg

Improper input validation in Samsung Mobile Devices

Priority LOW 33

An improper input validation vulnerability in LDFW prior to SMR Dec-2021 Release 1 allows attackers to perform arbitrary code execution.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0012 Published 2021-12-08 Fixed in SMR Dec-2021 Release 1 CWE-20
TI-2021-07755 CVE-2021-25516 · GHSA-qfq2-v5pr-268p

Improper handling of exceptional conditions in Samsung Mobile Devices

Priority LOW 33

An improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attackers to track locations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00311 Published 2021-12-08 Fixed in SMR Dec-2021 Release 1 CWE-703
TI-2021-07754 CVE-2021-25515 · GHSA-4hqj-2gg9-gqgp

Improper privilege management in Samsung Mobile Devices

Priority LOW 18

An improper usage of implicit intent in SemRewardManager prior to SMR Dec-2021 Release 1 allows attackers to access BSSID.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00101 Published 2021-12-08 Fixed in SMR Dec-2021 Release 1 CWE-269
TI-2021-07752 CVE-2021-25513 · GHSA-2mq8-26cv-3wh3

Improper privilege management in Samsung Mobile Devices

Priority LOW 11

An improper privilege management vulnerability in Apps Edge application prior to SMR Dec-2021 Release 1 allows unauthorized access to some device data on the lockscreen.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00109 Published 2021-12-08 Fixed in SMR Dec-2021 Release 1 CWE-269
TI-2021-07751 CVE-2021-25512 · GHSA-6c9w-8fw5-p82r

Improper input validation in Samsung Mobile Devices

Priority LOW 33

An improper validation vulnerability in telephony prior to SMR Dec-2021 Release 1 allows attackers to launch certain activities.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00107 Published 2021-12-08 Fixed in SMR Dec-2021 Release 1 CWE-20
TI-2021-07750 CVE-2021-25511 · GHSA-7qvh-g2f7-ww52

Improper input validation in Samsung Mobile Devices

Priority LOW 33

An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows attackers to write arbitrary files via a path traversal vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00115 Published 2021-12-08 Fixed in SMR Dec-2021 Release 1 CWE-20
TI-2021-07749 CVE-2021-25510 · GHSA-7ghq-32xm-6hpm

Improper input validation in Samsung Mobile Devices

Priority LOW 33

An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows local arbitrary code execution.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00115 Published 2021-12-08 Fixed in SMR Dec-2021 Release 1 CWE-20