Vulnerabilities > Samsung > High

DATE CVE VULNERABILITY TITLE RISK
2024-07-02 CVE-2024-20890 Improper Authentication vulnerability in Samsung Android 12.0/13.0/14.0
Improper input validation in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to trigger abnormal behavior.
low complexity
samsung CWE-287
8.8
2024-07-02 CVE-2024-20891 Unspecified vulnerability in Samsung Android 12.0/13.0/14.0
Improper access control in launchFullscreenIntent of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities.
local
low complexity
samsung
7.8
2024-07-02 CVE-2024-20892 Improper Verification of Cryptographic Signature vulnerability in Samsung Android 12.0/13.0/14.0
Improper verification of signature in FilterProvider prior to SMR Jul-2024 Release 1 allows local attackers to execute privileged behaviors.
local
low complexity
samsung CWE-347
7.8
2024-07-02 CVE-2024-20893 Out-of-bounds Write vulnerability in Samsung Android 12.0/13.0/14.0
Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows local attackers to trigger memory corruption.
local
low complexity
samsung CWE-787
7.8
2024-07-02 CVE-2024-20901 Out-of-bounds Write vulnerability in Samsung Android 12.0/13.0/14.0
Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local attackers to write out-of-bounds memory.
local
low complexity
samsung CWE-787
7.8
2024-07-02 CVE-2024-34585 Unspecified vulnerability in Samsung Android 12.0/13.0/14.0
Improper access control in launchApp of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities.
local
low complexity
samsung
7.8
2024-07-02 CVE-2024-34593 Unspecified vulnerability in Samsung Android 12.0/13.0/14.0
Improper input validation in parsing and distributing RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege.
network
low complexity
samsung
8.8
2024-07-02 CVE-2024-34595 Unspecified vulnerability in Samsung Android 12.0/13.0/14.0
Improper access control in clickAdapterItem of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities.
local
low complexity
samsung
7.8
2024-07-02 CVE-2024-34596 Improper Authentication vulnerability in Samsung Smartthings
Improper authentication in SmartThings prior to version 1.8.17 allows remote attackers to bypass the expiration date for members set by the owner.
network
low complexity
samsung CWE-287
7.5
2024-06-13 CVE-2024-31956 Out-of-bounds Write vulnerability in Samsung products
An issue was discovered in Samsung Mobile Processor Exynos 2200, Exynos 1480, Exynos 2400.
local
low complexity
samsung CWE-787
7.8