Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

14 records

Release: Samsung Mobile Devices SMR Sep-2021 Release 1 Clear all filters
TI-2021-07701 CVE-2021-25462 · GHSA-mp45-465m-vg8h

NULL pointer dereference in Samsung Mobile Devices

Priority LOW 24

NULL pointer dereference vulnerability in NPU driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00118 Published 2021-09-09 Fixed in SMR Sep-2021 Release 1 CWE-476
TI-2021-07699 CVE-2021-25460 · GHSA-xxpf-vv2v-cfqq

Improper authorization in Samsung Mobile Devices

Priority LOW 23

An improper access control vulnerability in sspExit() in BlockchainTZService prior to SMR Sep-2021 Release 1 allows attackers to terminate BlockchainTZService.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00096 Published 2021-09-09 Fixed in SMR Sep-2021 Release 1 CWE-285
TI-2021-07698 CVE-2021-25459 · GHSA-qgmh-w9pv-x25v

Improper authorization in Samsung Mobile Devices

Priority LOW 24

An improper access control vulnerability in sspInit() in BlockchainTZService prior to SMR Sep-2021 Release 1 allows attackers to start BlockchainTZService.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00116 Published 2021-09-09 Fixed in SMR Sep-2021 Release 1 CWE-285
TI-2021-07697 CVE-2021-25458 · GHSA-p2f3-wgvc-4w8q

NULL pointer dereference in Samsung Mobile Devices

Priority LOW 24

NULL pointer dereference vulnerability in ION driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00118 Published 2021-09-09 Fixed in SMR Sep-2021 Release 1 CWE-476
TI-2021-07696 CVE-2021-25457 · GHSA-8rxp-98h2-676c

Improper input validation in Samsung Mobile Devices

Priority LOW 25

An improper input validation vulnerability in DSP driver prior to SMR Sep-2021 Release 1 allows local attackers to get a limited kernel memory information.

CVSS 3.1MEDIUM 5.9 Local No auth No interaction EPSS 0.00099 Published 2021-09-09 Fixed in SMR Sep-2021 Release 1 CWE-20
TI-2021-07695 CVE-2021-25456 · GHSA-58r6-g6vr-4gpp

Out-of-bounds read in Samsung Mobile Devices

Priority LOW 24

OOB read vulnerability in libswmfextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute memcpy at arbitrary address via forged wmf file.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00249 Published 2021-09-09 Fixed in SMR Sep-2021 Release 1 CWE-125
TI-2021-07694 CVE-2021-25455 · GHSA-9jhc-m2f9-xm2h

Out-of-bounds read in Samsung Mobile Devices

Priority LOW 15

OOB read vulnerability in libsaviextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to access arbitrary address through pointer via forged avi file.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00193 Published 2021-09-09 Fixed in SMR Sep-2021 Release 1 CWE-125
TI-2021-07693 CVE-2021-25454 · GHSA-jjmq-qm7v-gx76

Out-of-bounds read in Samsung Mobile Devices

Priority LOW 24

OOB read vulnerability in libsaacextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute remote DoS via forged aac file.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00224 Published 2021-09-09 Fixed in SMR Sep-2021 Release 1 CWE-125
TI-2021-07692 CVE-2021-25453 · GHSA-v5gp-rv55-crrm

Improper input validation in Samsung Mobile Devices

Priority LOW 24

Some improper access control in Bluetooth APIs prior to SMR Sep-2021 Release 1 allows untrusted application to get Bluetooth information.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00106 Published 2021-09-09 Fixed in SMR Sep-2021 Release 1 CWE-20
TI-2021-07691 CVE-2021-25452 · GHSA-cgvh-3r4w-r8v7

Path traversal in Samsung Mobile Devices

Priority LOW 24

An improper input validation vulnerability in loading graph file in DSP driver prior to SMR Sep-2021 Release 1 allows attackers to perform permanent denial of service on the device.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00117 Published 2021-09-09 Fixed in SMR Sep-2021 Release 1 CWE-22
TI-2021-07690 CVE-2021-25451 · GHSA-fm4f-mfw8-25x9

Improper authentication in Samsung Mobile Devices

Priority LOW 15

A PendingIntent hijacking in NetworkPolicyManagerService prior to SMR Sep-2021 Release 1 allows attackers to get IMSI data.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00229 Published 2021-09-09 Fixed in SMR Sep-2021 Release 1 CWE-287
TI-2021-07689 CVE-2021-25450 · GHSA-w2q7-6g2f-4fq6

Improper input validation in Samsung Mobile Devices

Priority LOW 28

Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Sep-2021 Release 1 allows attackers to write file as system uid via remote socket.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00165 Published 2021-09-09 Fixed in SMR Sep-2021 Release 1 CWE-20
TI-2021-07688 CVE-2021-25449 · GHSA-ffqg-54mw-cg9v

Heap-based buffer overflow in Samsung Mobile Devices

Priority MEDIUM 42

An improper input validation vulnerability in libsapeextractor library prior to SMR Sep-2021 Release 1 allows attackers to execute arbitrary code in mediaextractor process.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00394 Published 2021-09-09 Fixed in SMR Sep-2021 Release 1 CWE-122