Vulnerabilities > Samsung > Android > 14.0

DATE CVE VULNERABILITY TITLE RISK
2024-12-03 CVE-2024-49410 Out-of-bounds Write vulnerability in Samsung Android 12.0/13.0
Out-of-bounds write in libswmfextractor.so prior to SMR Dec-2024 Release 1 allows local attackers to execute arbitrary code.
local
low complexity
samsung CWE-787
7.8
2024-12-03 CVE-2024-49411 Path Traversal vulnerability in Samsung Android 12.0/13.0
Path Traversal in ThemeCenter prior to SMR Dec-2024 Release 1 allows physical attackers to copy apk files to arbitrary path with ThemeCenter privilege.
low complexity
samsung CWE-22
4.6
2024-12-03 CVE-2024-49413 Improper Verification of Cryptographic Signature vulnerability in Samsung Android 13.0/14.0
Improper Verification of Cryptographic Signature in SmartSwitch prior to SMR Dec-2024 Release 1 allows local attackers to install malicious applications.
local
low complexity
samsung CWE-347
7.8
2024-12-03 CVE-2024-49414 Unspecified vulnerability in Samsung Android 12.0/13.0
Authentication Bypass Using an Alternate Path in Dex Mode prior to SMR Dec-2024 Release 1 allows physical attackers to temporarily access to recent app list.
low complexity
samsung
2.4
2024-12-03 CVE-2024-49415 Out-of-bounds Write vulnerability in Samsung Android 12.0/13.0
Out-of-bound write in libsaped.so prior to SMR Dec-2024 Release 1 allows remote attackers to execute arbitrary code.
network
low complexity
samsung CWE-787
critical
9.8
2024-11-06 CVE-2024-34673 Unspecified vulnerability in Samsung Android 12.0/13.0/14.0
Improper Input Validation in IpcProtocol in Modem prior to SMR Nov-2024 Release 1 allows local attackers to cause Denial-of-Service.
local
low complexity
samsung
5.5
2024-11-06 CVE-2024-34674 Unspecified vulnerability in Samsung Android 12.0/13.0/14.0
Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across multiple user profiles.
low complexity
samsung
4.6
2024-11-06 CVE-2024-34675 Unspecified vulnerability in Samsung Android 14.0
Improper access control in Dex Mode prior to SMR Nov-2024 Release 1 allows physical attackers to temporarily access to unlocked screen.
low complexity
samsung
4.6
2024-11-06 CVE-2024-34676 Out-of-bounds Write vulnerability in Samsung Android 12.0/13.0/14.0
Out-of-bounds write in parsing subtitle file in libsubextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption.
local
low complexity
samsung CWE-787
7.3
2024-11-06 CVE-2024-34677 Insecure Storage of Sensitive Information vulnerability in Samsung Android 12.0/13.0/14.0
Exposure of sensitive information in System UI prior to SMR Nov-2024 Release 1 allow local attackers to make malicious apps appear as legitimate.
local
low complexity
samsung CWE-922
3.3