Vulnerabilities > Samsung

DATE CVE VULNERABILITY TITLE RISK
2022-12-08 CVE-2022-39915 Unspecified vulnerability in Samsung Calendar
Improper access control vulnerability in Calendar prior to versions 11.6.08.0 in Android Q(10), 12.2.11.3000 in Android R(11), 12.3.07.2000 in Android S(12), and 12.4.02.0 in Android T(13) allows attackers to access sensitive information via implicit intent.
local
low complexity
samsung
5.5
2022-11-09 CVE-2022-39881 Out-of-bounds Read vulnerability in Samsung Exynos Firmware
Improper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR Sep-2022 Release allows remote attacker to read out of bounds memory.
network
low complexity
samsung CWE-125
critical
9.1
2022-11-09 CVE-2022-39889 Unspecified vulnerability in Samsung Galaxywatch4Plugin 2.2.11.22102751
Improper access control vulnerability in GalaxyWatch4Plugin prior to versions 2.2.11.22101351 and 2.2.12.22101351 allows attackers to access wearable device information.
local
low complexity
samsung
3.3
2022-11-09 CVE-2022-39890 Unspecified vulnerability in Samsung Billing
Improper Authorization in Samsung Billing prior to version 5.0.56.0 allows attacker to get sensitive information.
network
low complexity
samsung
7.5
2022-11-09 CVE-2022-39891 Out-of-bounds Write vulnerability in Samsung Editor Lite 4.0.40.14
Heap overflow vulnerability in parse_pce function in libsavsaudio.so in Editor Lite prior to version 4.0.41.3 allows attacker to get information.
network
low complexity
samsung CWE-787
7.5
2022-11-09 CVE-2022-39892 Improper Authentication vulnerability in Samsung Pass
Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature.
network
low complexity
samsung CWE-287
critical
9.8
2022-11-09 CVE-2022-39893 Information Exposure Through Log Files vulnerability in Samsung Galaxy Buds PRO Manage
Sensitive information exposure vulnerability in FmmBaseModel in Galaxy Buds Pro Manage prior to version 4.1.22092751 allows local attackers with log access permission to get device identifier data through device log.
local
low complexity
samsung CWE-532
3.3
2022-10-07 CVE-2022-39857 Unspecified vulnerability in Samsung Factorycamerafb 3.4.74
Improper access control vulnerability in CameraTestActivity in FactoryCameraFB prior to version 3.5.51 allows attackers to access broadcasting Intent as system uid privilege.
local
low complexity
samsung
5.5
2022-10-07 CVE-2022-39858 Path Traversal vulnerability in Samsung Factorycamera 2.1.96
Path traversal vulnerability in AtBroadcastReceiver in FactoryCamera prior to version 3.5.51 allows attackers to write arbitrary file as FactoryCamera privilege.
local
low complexity
samsung CWE-22
7.8
2022-10-07 CVE-2022-39859 Unspecified vulnerability in Samsung Uphelper Library
Implicit intent hijacking vulnerability in UPHelper library prior to version 3.0.12 allows attackers to access sensitive information via implicit intent.
local
low complexity
samsung
3.3