Vulnerabilities > Samsung

DATE CVE VULNERABILITY TITLE RISK
2023-11-08 CVE-2023-41112 Classic Buffer Overflow vulnerability in Samsung products
An issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem (Exynos 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, Modem 5123, Modem 5300, and Auto T5123).
network
low complexity
samsung CWE-120
7.5
2023-11-08 CVE-2023-41270 Improper Restriction of Excessive Authentication Attempts vulnerability in Samsung Ue40D7000 Firmware Tgapdeuc1033.2
Improper Restriction of Excessive Authentication Attempts vulnerability in Samsung Smart TV UE40D7000 version T-GAPDEUC-1033.2 and before allows attackers to cause a denial of service via WPS attack tools.
low complexity
samsung CWE-307
4.3
2023-11-07 CVE-2023-30739 Unspecified vulnerability in Samsung Android 11.0/12.0
Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code.
local
low complexity
samsung
7.8
2023-11-07 CVE-2023-42527 Improper Input Validation vulnerability in Samsung Android 11.0/12.0
Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to expose sensitive information.
local
low complexity
samsung CWE-20
5.5
2023-11-07 CVE-2023-42528 Out-of-bounds Write vulnerability in Samsung Android 11.0/12.0
Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code.
local
low complexity
samsung CWE-787
7.8
2023-11-07 CVE-2023-42529 Out-of-bounds Write vulnerability in Samsung Android 11.0/12.0/13.0
Out-of-bound write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to execute arbitrary code.
local
low complexity
samsung CWE-787
7.8
2023-11-07 CVE-2023-42530 Unspecified vulnerability in Samsung Android 11.0/12.0
Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct without User Interaction.
network
low complexity
samsung
7.5
2023-11-07 CVE-2023-42531 Improper Authentication vulnerability in Samsung Android 11.0/12.0
Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass restrictions on starting activities from the background.
local
low complexity
samsung CWE-287
7.1
2023-11-07 CVE-2023-42532 Improper Certificate Validation vulnerability in Samsung Android 11.0/12.0
Improper Certificate Validation in FotaAgent prior to SMR Nov-2023 Release1 allows remote attacker to intercept the network traffic including Firmware information.
network
low complexity
samsung CWE-295
7.5
2023-11-07 CVE-2023-42533 Unspecified vulnerability in Samsung Android 12.0/13.0
Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execute arbitrary code in Kernel.
low complexity
samsung
6.8