Vulnerabilities > Samsung > Android
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-02-09 | CVE-2023-21442 | Unspecified vulnerability in Samsung Android 11.0/12.0 Improper access control vulnerability in Runestone application prior to version 2.9.09.003 in Android R(11) and 3.2.01.007 in Android S(12) allows local attackers to get device location information. | 5.5 |
| 2023-02-09 | CVE-2023-21445 | Exposure of Resource to Wrong Sphere vulnerability in Samsung Android 11.0/12.0 Improper access control vulnerability in MyFiles prior to versions 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android T(13) allows local attacker to write file with MyFiles privilege via implicit intent. | 7.8 |
| 2023-02-09 | CVE-2023-21446 | Improper Input Validation vulnerability in Samsung Android 11.0/12.0 Improper input validation in MyFiles prior to version 12.2.09 in Android R(11), 13.1.03.501 in Android S( 12) and 14.1.00.422 in Android T(13) allows local attacker to access data of MyFiles. | 5.5 |
| 2023-02-09 | CVE-2023-21451 | Out-of-bounds Write vulnerability in Samsung Android 12.0 A Stack-based overflow vulnerability in IpcRxEmbmsSessionList in SECRIL prior to Android S(12) allows attacker to cause memory corruptions. | 7.8 |
| 2021-10-06 | CVE-2021-25487 | Out-of-bounds Read vulnerability in Samsung Android Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer. | 7.8 |
| 2021-10-06 | CVE-2021-25489 | Use of Externally-Controlled Format String vulnerability in Samsung Android Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic. | 5.5 |
| 2021-06-11 | CVE-2021-25394 | Use After Free vulnerability in Samsung Android A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised. | 6.4 |
| 2021-06-11 | CVE-2021-25395 | Race Condition vulnerability in Samsung Android A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised. | 6.4 |
| 2021-03-26 | CVE-2021-25372 | Out-of-bounds Write vulnerability in Samsung Android 10.0/11.0 An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access. | 6.7 |
| 2021-03-26 | CVE-2021-25371 | Unspecified vulnerability in Samsung Android 10.0/11.0 A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP. | 6.7 |