Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Release: Samsung Mobile Devices SMR Mar-2023 Release 1 Clear all filters
TI-2023-07862 CVE-2023-21461 · GHSA-rqrp-jf3c-7j6j

Improper authorization in Samsung Mobile Devices

Priority LOW 24

Improper authorization vulnerability in AutoPowerOnOffConfirmDialog in Settings prior to SMR Mar-2023 Release 1 allows local attacker to turn device off via unprotected activity.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00146 Published 2023-03-16 Fixed in SMR Mar-2023 Release 1 CWE-285
TI-2023-07860 CVE-2023-21459 · GHSA-xfx9-7343-fmvv

Use after free in Samsung Mobile Devices

Priority MEDIUM 42

Use after free vulnerability in decon driver prior to SMR Mar-2023 Release 1 allows attackers to cause memory access fault.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00272 Published 2023-03-16 Fixed in SMR Mar-2023 Release 1 CWE-416
TI-2023-07859 CVE-2023-21458 · GHSA-68v9-m4mj-hq4h

Improper privilege management in Samsung Mobile Devices

Priority LOW 27

Improper privilege management vulnerability in PhoneStatusBarPolicy in System UI prior to SMR Mar-2023 Release 1 allows attacker to turn off Do not disturb via unprotected intent.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00154 Published 2023-03-16 Fixed in SMR Mar-2023 Release 1 CWE-269
TI-2023-07858 CVE-2023-21457 · GHSA-r6cf-4wm2-2mj2

Improper access control in Samsung Mobile Devices

Priority LOW 34

Improper access control vulnerability in Bluetooth prior to SMR Mar-2023 Release 1 allows attackers to send file via Bluetooth without related permission.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.00168 Published 2023-03-16 Fixed in SMR Mar-2023 Release 1 CWE-284
TI-2023-07857 CVE-2023-21456 · GHSA-qmcj-8g67-9633

Path traversal in Samsung Mobile Devices

Priority MEDIUM 40

Path traversal vulnerability in Galaxy Themes Service prior to SMR Mar-2023 Release 1 allows attacker to access arbitrary file with system uid.

CVSS 3.1CRITICAL 9.0 Local No auth No interaction EPSS 0.00217 Published 2023-03-16 Fixed in SMR Mar-2023 Release 1 CWE-22
TI-2023-07856 CVE-2023-21455 · GHSA-wxhm-9fww-9xcx

Improper authentication in Samsung Mobile Devices

Priority LOW 39

Improper authorization implementation in Exynos baseband prior to SMR Mar-2023 Release 1 allows incorrect handling of unencrypted message.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00403 Published 2023-03-16 Fixed in SMR Mar-2023 Release 1 CWE-287
TI-2023-07855 CVE-2023-21454 · GHSA-3rw6-cqcq-m6xc

Improper authorization in Samsung Mobile Devices

Priority LOW 12

Improper authorization in Samsung Keyboard prior to SMR Mar-2023 Release 1 allows physical attacker to access users text history on the lockscreen.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00231 Published 2023-03-16 Fixed in SMR Mar-2023 Release 1 CWE-285
TI-2023-07854 CVE-2023-21453 · GHSA-7q68-9ffx-5v8q

Improper input validation in Samsung Mobile Devices

Priority LOW 26

Improper input validation vulnerability in SoftSim TA prior to SMR Mar-2023 Release 1 allows local attackers access to protected data.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00171 Published 2023-03-16 Fixed in SMR Mar-2023 Release 1 CWE-20
TI-2023-07853 CVE-2023-21452 · GHSA-4g7q-85r5-pm7w

Improper authorization in Samsung Mobile Devices

Priority LOW 15

Improper usage of implicit intent in Bluetooth prior to SMR Mar-2023 Release 1 allows attacker to get MAC address of connected device.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.0015 Published 2023-03-16 Fixed in SMR Mar-2023 Release 1 CWE-285
TI-2023-07850 CVE-2023-21449 · GHSA-2pwm-63gm-7654

Information disclosure in Samsung Mobile Devices

Priority LOW 24

Improper access control vulnerability in Call application prior to SMR Mar-2023 Release 1 allows local attackers to access sensitive information without proper permission.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00168 Published 2023-03-16 Fixed in SMR Mar-2023 Release 1 CWE-200