Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Release: Samsung Mobile Devices SMR APR-2021 Release 1 Clear all filters
TI-2021-07604 CVE-2021-25365 · GHSA-qjqc-88q2-gp64

Improper privilege management in Samsung Mobile Devices

Priority LOW 33

An improper exception control in softsimd prior to SMR APR-2021 Release 1 allows unprivileged applications to access the API in softsimd.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00115 Published 2021-04-09 Fixed in SMR APR-2021 Release 1 CWE-269
TI-2021-07603 CVE-2021-25364 · GHSA-342r-v98v-xjfv

Information disclosure in Samsung Mobile Devices

Priority LOW 18

A pendingIntent hijacking vulnerability in Secure Folder prior to SMR APR-2021 Release 1 allows unprivileged applications to access contact information.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00129 Published 2021-04-09 Fixed in SMR APR-2021 Release 1 CWE-200
TI-2021-07602 CVE-2021-25363 · GHSA-9gc3-4hgr-p2p9

Improper privilege management in Samsung Mobile Devices

Priority LOW 29

An improper access control in ActivityManagerService prior to SMR APR-2021 Release 1 allows untrusted applications to access running processesdelete some local files.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.0011 Published 2021-04-09 Fixed in SMR APR-2021 Release 1 CWE-269
TI-2021-07601 CVE-2021-25362 · GHSA-hrcm-8p8v-3f27

Improper privilege management in Samsung Mobile Devices

Priority LOW 29

An improper permission management in CertInstaller prior to SMR APR-2021 Release 1 allows untrusted applications to delete certain local files.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00108 Published 2021-04-09 Fixed in SMR APR-2021 Release 1 CWE-269
TI-2021-07600 CVE-2021-25361 · GHSA-95xc-mm75-h3v2

Path traversal in Samsung Mobile Devices

Priority LOW 37

An improper access control vulnerability in stickerCenter prior to SMR APR-2021 Release 1 allows local attackers to read or write arbitrary files of system process via untrusted applications.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00167 Published 2021-04-09 Fixed in SMR APR-2021 Release 1 CWE-22
TI-2021-07599 CVE-2021-25360 · GHSA-g8xw-6mmv-frg4

Heap-based buffer overflow in Samsung Mobile Devices

Priority MEDIUM 43

An improper input validation vulnerability in libswmfextractor library prior to SMR APR-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00725 Published 2021-04-09 Fixed in SMR APR-2021 Release 1 CWE-122
TI-2021-07598 CVE-2021-25359 · GHSA-3f4f-fx9x-p95r

Improper access control in Samsung Mobile Devices

Priority LOW 18

An improper SELinux policy prior to SMR APR-2021 Release 1 allows local attackers to access AP information without proper permissions via untrusted applications.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00109 Published 2021-04-09 Fixed in SMR APR-2021 Release 1 CWE-284
TI-2021-07597 CVE-2021-25358 · GHSA-3m8h-gcjc-3m58

Incorrect default permissions in Samsung Mobile Devices

Priority LOW 18

A vulnerability that stores IMSI values in an improper path prior to SMR APR-2021 Release 1 allows local attackers to access IMSI values without any permission via untrusted applications.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00109 Published 2021-04-09 Fixed in SMR APR-2021 Release 1 CWE-256
TI-2021-07595 CVE-2021-25356 · GHSA-c8p6-443q-9mqj

Improper input validation in Samsung Mobile Devices

Priority LOW 37

An improper caller check vulnerability in Managed Provisioning prior to SMR APR-2021 Release 1 allows unprivileged application to install arbitrary application, grant device admin permission and then delete several insta…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00183 Published 2021-04-09 Fixed in SMR APR-2021 Release 1 CWE-20