Vulnerabilities > Samsung > Android
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-02-09 | CVE-2023-21439 | Improper Input Validation vulnerability in Samsung Android 12.0/13.0 Improper input validation vulnerability in UwbDataTxStatusEvent prior to SMR Feb-2023 Release 1 allows attackers to launch certain activities. | 7.8 |
| 2023-02-09 | CVE-2023-21440 | Inclusion of Functionality from Untrusted Control Sphere vulnerability in Samsung Android 13.0 Improper access control vulnerability in WindowManagerService prior to SMR Feb-2023 Release 1 allows attackers to take a screen capture. | 5.5 |
| 2023-02-09 | CVE-2023-21441 | Insufficient Verification of Data Authenticity vulnerability in Samsung Android 10.0/11.0 Insufficient Verification of Data Authenticity vulnerability in Routine prior to versions 2.6.30.6 in Android Q(10), 3.1.21.10 in Android R(11) and 3.5.2.23 in Android S(12) allows local attacker to access protected files via unused code. | 5.5 |
| 2023-02-09 | CVE-2023-21442 | Unspecified vulnerability in Samsung Android 11.0/12.0 Improper access control vulnerability in Runestone application prior to version 2.9.09.003 in Android R(11) and 3.2.01.007 in Android S(12) allows local attackers to get device location information. | 5.5 |
| 2023-02-09 | CVE-2023-21445 | Exposure of Resource to Wrong Sphere vulnerability in Samsung Android 11.0/12.0 Improper access control vulnerability in MyFiles prior to versions 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android T(13) allows local attacker to write file with MyFiles privilege via implicit intent. | 7.8 |
| 2023-02-09 | CVE-2023-21446 | Improper Input Validation vulnerability in Samsung Android 11.0/12.0 Improper input validation in MyFiles prior to version 12.2.09 in Android R(11), 13.1.03.501 in Android S( 12) and 14.1.00.422 in Android T(13) allows local attacker to access data of MyFiles. | 5.5 |
| 2023-02-09 | CVE-2023-21451 | Out-of-bounds Write vulnerability in Samsung Android 12.0 A Stack-based overflow vulnerability in IpcRxEmbmsSessionList in SECRIL prior to Android S(12) allows attacker to cause memory corruptions. | 7.8 |
| 2021-10-06 | CVE-2021-25487 | Out-of-bounds Read vulnerability in Samsung Android Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer. | 7.8 |
| 2021-10-06 | CVE-2021-25489 | Use of Externally-Controlled Format String vulnerability in Samsung Android Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic. | 5.5 |
| 2021-06-11 | CVE-2021-25394 | Use After Free vulnerability in Samsung Android A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised. | 6.4 |