Vulnerabilities > Samsung

DATE CVE VULNERABILITY TITLE RISK
2023-12-05 CVE-2023-42563 Integer Overflow or Wraparound vulnerability in Samsung Android 12.0/13.0/14.0
Integer overflow vulnerability in landmarkCopyImageToNative of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow.
local
low complexity
samsung CWE-190
7.8
2023-12-05 CVE-2023-42564 Unspecified vulnerability in Samsung Android 12.0/13.0/14.0
Improper access control in knoxcustom service prior to SMR Dec-2023 Release 1 allows attacker to send broadcast with system privilege.
local
low complexity
samsung
5.5
2023-12-05 CVE-2023-42565 Unspecified vulnerability in Samsung Android 13.0/14.0
Improper input validation vulnerability in Smart Clip prior to SMR Dec-2023 Release 1 allows local attackers with shell privilege to execute arbitrary code.
local
low complexity
samsung
6.7
2023-12-05 CVE-2023-42566 Out-of-bounds Write vulnerability in Samsung Android 11.0/14.0
Out-of-bound write vulnerability in libsavsvc prior to SMR Dec-2023 Release 1 allows local attackers to execute arbitrary code.
local
low complexity
samsung CWE-787
7.8
2023-12-05 CVE-2023-42567 Out-of-bounds Write vulnerability in Samsung Android 14.0
Improper size check vulnerability in softsimd prior to SMR Dec-2023 Release 1 allows stack-based buffer overflow.
local
low complexity
samsung CWE-787
7.8
2023-12-05 CVE-2023-42568 Unspecified vulnerability in Samsung Android 12.0/13.0
Improper access control vulnerability in SmartManagerCN prior to SMR Dec-2023 Release 1 allows local attackers to access arbitrary files with system privilege.
local
low complexity
samsung
4.4
2023-12-05 CVE-2023-42569 Incorrect Authorization vulnerability in Samsung Android 11.0/13.0
Improper authorization verification vulnerability in AR Emoji prior to SMR Dec-2023 Release 1 allows attackers to read sandbox data of AR Emoji.
local
low complexity
samsung CWE-863
3.3
2023-12-05 CVE-2023-42570 Unspecified vulnerability in Samsung Android 11.0/14.0
Improper access control vulnerability in KnoxCustomManagerService prior to SMR Dec-2023 Release 1 allows attacker to access device SIM PIN.
local
low complexity
samsung
3.3
2023-12-05 CVE-2023-42571 Unspecified vulnerability in Samsung Find MY Mobile
Abuse of remote unlock in Find My Mobile prior to version 7.3.13.4 allows physical attacker to unlock the device remotely by resetting the Samsung Account password with SMS verification when user lost the device.
low complexity
samsung
6.8
2023-12-05 CVE-2023-42572 Unspecified vulnerability in Samsung Account web Software Development KIT
Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensitive information.
local
low complexity
samsung
5.5