Vulnerabilities > Samsung > Android > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-07-02 CVE-2024-34591 Unspecified vulnerability in Samsung Android 12.0/13.0/14.0
Improper input validation in parsing an item data from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service.
network
low complexity
samsung
4.3
2024-07-02 CVE-2024-34592 Unspecified vulnerability in Samsung Android 12.0/13.0/14.0
Improper input validation in parsing RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service.
network
low complexity
samsung
4.3
2024-07-02 CVE-2024-34594 Unspecified vulnerability in Samsung Android 12.0/13.0/14.0
Exposure of sensitive information in proc file system prior to SMR Jul-2024 Release 1 allows local attackers to read kernel memory address.
local
low complexity
samsung
5.5
2024-02-06 CVE-2024-20814 Out-of-bounds Read vulnerability in Samsung Android 11.0/12.0
Out-of-bounds Read in padmd_vld_ac_prog_refine of libpadm.so prior to SMR Feb-2024 Release 1 allows local attackers access unauthorized information.
local
low complexity
samsung CWE-125
5.5
2024-02-06 CVE-2024-20815 Improper Authentication vulnerability in Samsung Android 11.0/12.0
Improper authentication vulnerability in onCharacteristicReadRequest in Auto Hotspot prior to SMR Feb-2024 Release 1 allows adjacent attackers connect to victim's mobile hotspot without user awareness.
low complexity
samsung CWE-287
6.5
2024-02-06 CVE-2024-20816 Improper Authentication vulnerability in Samsung Android 11.0/12.0
Improper authentication vulnerability in onCharacteristicWriteRequest in Auto Hotspot prior to SMR Feb-2024 Release 1 allows adjacent attackers connect to victim's mobile hotspot without user awareness.
low complexity
samsung CWE-287
6.5
2024-01-04 CVE-2024-20803 Improper Authentication vulnerability in Samsung Android 11.0/12.0
Improper authentication vulnerability in Bluetooth pairing process prior to SMR Jan-2024 Release 1 allows remote attackers to establish pairing process without user interaction.
low complexity
samsung CWE-287
6.5
2024-01-04 CVE-2024-20804 Path Traversal vulnerability in Samsung Android 11.0/12.0
Path traversal vulnerability in FileUriConverter of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrary file.
local
low complexity
samsung CWE-22
5.5
2024-01-04 CVE-2024-20805 Path Traversal vulnerability in Samsung Android 11.0/12.0
Path traversal vulnerability in ZipCompressor of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrary file.
local
low complexity
samsung CWE-22
5.5
2024-01-04 CVE-2024-20806 Unspecified vulnerability in Samsung Android 11.0/12.0
Improper access control in Notification service prior to SMR Jan-2024 Release 1 allows local attacker to access notification data.
local
low complexity
samsung
5.5