Vulnerabilities > Samsung

DATE CVE VULNERABILITY TITLE RISK
2024-03-05 CVE-2024-20841 Incorrect Default Permissions vulnerability in Samsung Account
Improper Handling of Insufficient Privileges in Samsung Account prior to version 14.8.00.3 allows local attackers to access data.
local
low complexity
samsung CWE-276
5.5
2024-02-07 CVE-2024-23769 Unspecified vulnerability in Samsung Magician 8.0.0
Improper privilege control for the named pipe in Samsung Magician PC Software 8.0.0 (for Windows) allows a local attacker to read privileged data.
local
low complexity
samsung
5.5
2024-02-06 CVE-2024-20810 Improper Restriction of Rendered UI Layers or Frames vulnerability in Samsung Android 12.0/13.0
Implicit intent hijacking vulnerability in Smart Suggestions prior to SMR Feb-2024 Release 1 allows local attackers to get sensitive information.
local
low complexity
samsung CWE-1021
3.3
2024-02-06 CVE-2024-20811 Unspecified vulnerability in Samsung Android 11.0/12.0
Improper caller verification in GameOptimizer prior to SMR Feb-2024 Release 1 allows local attackers to configure GameOptimizer.
local
low complexity
samsung
3.3
2024-02-06 CVE-2024-20812 Out-of-bounds Write vulnerability in Samsung Android 11.0/12.0
Out-of-bounds Write in padmd_vld_htbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code.
local
low complexity
samsung CWE-787
7.8
2024-02-06 CVE-2024-20813 Out-of-bounds Write vulnerability in Samsung Android 11.0/12.0
Out-of-bounds Write in padmd_vld_qtbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code.
local
low complexity
samsung CWE-787
7.8
2024-02-06 CVE-2024-20814 Out-of-bounds Read vulnerability in Samsung Android 11.0/12.0
Out-of-bounds Read in padmd_vld_ac_prog_refine of libpadm.so prior to SMR Feb-2024 Release 1 allows local attackers access unauthorized information.
local
low complexity
samsung CWE-125
5.5
2024-02-06 CVE-2024-20815 Improper Authentication vulnerability in Samsung Android 11.0/12.0
Improper authentication vulnerability in onCharacteristicReadRequest in Auto Hotspot prior to SMR Feb-2024 Release 1 allows adjacent attackers connect to victim's mobile hotspot without user awareness.
low complexity
samsung CWE-287
6.5
2024-02-06 CVE-2024-20816 Improper Authentication vulnerability in Samsung Android 11.0/12.0
Improper authentication vulnerability in onCharacteristicWriteRequest in Auto Hotspot prior to SMR Feb-2024 Release 1 allows adjacent attackers connect to victim's mobile hotspot without user awareness.
low complexity
samsung CWE-287
6.5
2024-02-06 CVE-2024-20817 Out-of-bounds Write vulnerability in Samsung Android 11.0/12.0
Out-of-bounds Write vulnerabilities in svc1td_vld_slh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.
local
low complexity
samsung CWE-787
7.8