Vulnerabilities > Samsung > Android > 12.0

DATE CVE VULNERABILITY TITLE RISK
2023-02-09 CVE-2023-21425 Improper Authentication vulnerability in Samsung Android 10.0/11.0
Improper access control vulnerability in telecom application prior to SMR JAN-2023 Release 1 allows local attackers to get sensitive information.
local
low complexity
samsung CWE-287
5.5
2023-02-09 CVE-2023-21427 Unspecified vulnerability in Samsung Android 11.0/12.0
Improper access control vulnerability in NfcTile prior to SMR Jan-2023 Release 1 allows to attacker to use NFC without user recognition.
low complexity
samsung
6.5
2023-02-09 CVE-2023-21428 Improper Input Validation vulnerability in Samsung Android 11.0/12.0
Improper input validation vulnerability in TelephonyUI prior to SMR Jan-2023 Release 1 allows attackers to configure Preferred Call.
local
low complexity
samsung CWE-20
3.3
2023-02-09 CVE-2023-21429 Unspecified vulnerability in Samsung Android 10.0/11.0
Improper usage of implict intent in ePDG prior to SMR JAN-2023 Release 1 allows attacker to access SSID.
local
low complexity
samsung
3.3
2023-02-09 CVE-2023-21430 Out-of-bounds Read vulnerability in Samsung Android 10.0/11.0
An out-of-bound read vulnerability in mapToBuffer function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR JAN-2023 Release 1 allows attacker to cause memory access fault.
local
low complexity
samsung CWE-125
7.8
2023-02-09 CVE-2023-21435 Information Exposure Through Log Files vulnerability in Samsung Android 11.0/12.0
Exposure of Sensitive Information vulnerability in Fingerprint TA prior to SMR Feb-2023 Release 1 allows attackers to access the memory address information via log.
local
low complexity
samsung CWE-532
5.5
2023-02-09 CVE-2023-21436 Unspecified vulnerability in Samsung Android 10.0/11.0
Improper usage of implicit intent in Contacts prior to SMR Feb-2023 Release 1 allows attacker to get account ID.
local
low complexity
samsung
3.3
2023-02-09 CVE-2023-21437 Improper Authentication vulnerability in Samsung Android 10.0/11.0
Improper access control vulnerability in Phone application prior to SMR Feb-2023 Release 1 allows local attackers to access sensitive information via implicit broadcast.
local
low complexity
samsung CWE-287
5.5
2023-02-09 CVE-2023-21438 Exposure of Resource to Wrong Sphere vulnerability in Samsung Android 11.0/12.0
Improper logic in HomeScreen prior to SMR Feb-2023 Release 1 allows physical attacker to access App preview protected by Secure Folder.
low complexity
samsung CWE-668
2.4
2023-02-09 CVE-2023-21439 Improper Input Validation vulnerability in Samsung Android 12.0/13.0
Improper input validation vulnerability in UwbDataTxStatusEvent prior to SMR Feb-2023 Release 1 allows attackers to launch certain activities.
local
low complexity
samsung CWE-20
7.8