Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Release: Samsung Mobile Devices SMR Nov-2022 Release 1 Clear all filters
TI-2022-18881 CVE-2022-39887 · GHSA-4p9j-v8r7-7w39

Improper access control in Samsung Mobile Devices

Priority LOW 19

Improper access control vulnerability in clearAllGlobalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows local attacker to configure EDM setting.

CVSS 3.1MEDIUM 4.3 Local No auth No interaction EPSS 0.00085 Published 2022-11-09 Fixed in SMR Nov-2022 Release 1 CWE-284
TI-2022-18880 CVE-2022-39886 · GHSA-8rg8-wfmh-w9w9

Improper handling of exceptional conditions in Samsung Mobile Devices

Priority LOW 25

Improper access control vulnerability in IpcRxServiceModeBigDataInfo in RIL prior to SMR Nov-2022 Release 1 allows local attacker to access Device information.

CVSS 3.1MEDIUM 5.9 Local No auth No interaction EPSS 0.00085 Published 2022-11-09 Fixed in SMR Nov-2022 Release 1 CWE-280
TI-2022-18879 CVE-2022-39885 · GHSA-85mc-vhw9-m985

Improper handling of exceptional conditions in Samsung Mobile Devices

Priority LOW 25

Improper access control vulnerability in BootCompletedReceiver_CMCC in DeviceManagement prior to SMR Nov-2022 Release 1 allows local attacker to access to Device information.

CVSS 3.1MEDIUM 5.9 Local No auth No interaction EPSS 0.00085 Published 2022-11-09 Fixed in SMR Nov-2022 Release 1 CWE-280
TI-2022-18878 CVE-2022-39884 · GHSA-p2vq-m3jx-j3g2

Improper access control in Samsung Mobile Devices

Priority LOW 19

Improper access control vulnerability in IImsService prior to SMR Nov-2022 Release 1 allows local attacker to access to Call information.

CVSS 3.1MEDIUM 4.3 Local No auth No interaction EPSS 0.00087 Published 2022-11-09 Fixed in SMR Nov-2022 Release 1 CWE-284
TI-2022-18877 CVE-2022-39883 · GHSA-67vh-5v34-43vx

Improper authorization in Samsung Mobile Devices

Priority LOW 33

Improper authorization vulnerability in StorageManagerService prior to SMR Nov-2022 Release 1 allows local attacker to call privileged API.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00087 Published 2022-11-09 Fixed in SMR Nov-2022 Release 1 CWE-285
TI-2022-18876 CVE-2022-39882 · GHSA-m9cp-qcw7-hq7f

Out-of-bounds write in Samsung Mobile Devices

Priority LOW 36

Heap overflow vulnerability in sflacf_fal_bytes_peek function in libsmat.so library prior to SMR Nov-2022 Release 1 allows local attacker to execute arbitrary code.

CVSS 3.1HIGH 8.0 Local No auth No interaction EPSS 0.00114 Published 2022-11-09 Fixed in SMR Nov-2022 Release 1 CWE-787
TI-2022-18875 CVE-2022-39881 · GHSA-3q99-27hh-rcx8

Improper input validation in Samsung Mobile Devices

Priority MEDIUM 41

Improper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR Sep-2022 Release allows remote attacker to read out of bounds memory.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00992 Published 2022-11-09 Fixed in SMR Nov-2022 Release 1 CWE-20
TI-2022-18874 CVE-2022-39880 · GHSA-2gcv-8ccj-f7px

Improper input validation in Samsung Mobile Devices

Priority LOW 35

Improper input validation vulnerability in DualOutFocusViewer prior to SMR Nov-2022 Release 1 allows local attacker to perform an arbitrary code execution.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00145 Published 2022-11-09 Fixed in SMR Nov-2022 Release 1 CWE-20
TI-2022-18873 CVE-2022-39879 · GHSA-hxpv-p77h-pvx2

Improper authorization in Samsung Mobile Devices

Priority LOW 25

Improper authorization vulnerability in?CallBGProvider prior to SMR Nov-2022 Release 1 allows local attacker to grant permission for accessing information with phone uid.

CVSS 3.1MEDIUM 5.9 Local No auth No interaction EPSS 0.00084 Published 2022-11-09 Fixed in SMR Nov-2022 Release 1 CWE-285