Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Samsung Mobile Devices SMR Nov-2021 Release 1 Clear all filters
TI-2021-07742 CVE-2021-25503 · GHSA-gmr3-7wh5-8w7g

Improper input validation in Samsung Mobile Devices

Priority LOW 28

Improper input validation vulnerability in HDCP prior to SMR Nov-2021 Release 1 allows attackers to arbitrary code execution.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00116 Published 2021-11-05 Fixed in SMR Nov-2021 Release 1 CWE-20
TI-2021-07741 CVE-2021-25502 · GHSA-hvx4-75hg-h9cr

Improper privilege management in Samsung Mobile Devices

Priority LOW 33

A vulnerability of storing sensitive information insecurely in Property Settings prior to SMR Nov-2021 Release 1 allows attackers to read ESN value without priviledge.

CVSS 3.1HIGH 7.9 Local Low privileges No interaction EPSS 0.00068 Published 2021-11-05 Fixed in SMR Nov-2021 Release 1 CWE-269
TI-2021-07740 CVE-2021-25501 · GHSA-8wr5-x8rr-mchx

Improper access control in Samsung Mobile Devices

Priority LOW 24

An improper access control vulnerability in SCloudBnRReceiver in SecTelephonyProvider prior to SMR Nov-2021 Release 1 allows untrusted application to call some protected providers.

CVSS 3.1MEDIUM 5.7 Local No auth No interaction EPSS 0.00096 Published 2021-11-05 Fixed in SMR Nov-2021 Release 1 CWE-284
TI-2021-07739 CVE-2021-25500 · GHSA-8p45-f6fm-g8jq

Improper input validation in Samsung Mobile Devices

Priority LOW 30

A missing input validation in HDCP LDFW prior to SMR Nov-2021 Release 1 allows attackers to overwrite TZASC allowing TEE compromise.

CVSS 3.1HIGH 7.2 Local High privileges No interaction EPSS 0.00103 Published 2021-11-05 Fixed in SMR Nov-2021 Release 1 CWE-20