Vulnerabilities > Samsung > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-08-07 CVE-2024-34631 Out-of-bounds Read vulnerability in Samsung Notes 2.0.02.31/4.2.00.22/4.3.02.61
Out-of-bounds read in applying new binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory.
local
low complexity
samsung CWE-125
5.5
2024-08-07 CVE-2024-34636 Unspecified vulnerability in Samsung Email 6.1.82.0/6.1.90.16/6.1.90.4
Use of implicit intent for sensitive communication in Samsung Email prior to version 6.1.94.2 allows local attackers to get sensitive information.
local
low complexity
samsung
5.5
2024-07-08 CVE-2024-34602 Unspecified vulnerability in Samsung Android 12.0/13.0/14.0
Use of implicit intent for sensitive communication in Samsung Messages prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.
local
low complexity
samsung
5.5
2024-07-08 CVE-2024-34603 Unspecified vulnerability in Samsung Android 13.0/14.0
Improper access control in Samsung Message prior to SMR Jul-2024 Release 1 allows local attackers to access location data.
local
low complexity
samsung
5.5
2024-07-02 CVE-2024-20889 Improper Authentication vulnerability in Samsung Android 12.0/13.0/14.0
Improper authentication in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to pair with devices.
low complexity
samsung CWE-287
4.3
2024-07-02 CVE-2024-20894 Improper Handling of Exceptional Conditions vulnerability in Samsung Android 12.0/13.0/14.0
Improper handling of exceptional conditions in Secure Folder prior to SMR Jul-2024 Release 1 allows physical attackers to bypass authentication under certain condition.
low complexity
samsung CWE-755
4.3
2024-07-02 CVE-2024-20895 Unspecified vulnerability in Samsung Android 12.0/13.0/14.0
Improper access control in Dar service prior to SMR Jul-2024 Release 1 allows local attackers to bypass restriction for calling SDP features.
local
low complexity
samsung
5.5
2024-07-02 CVE-2024-20896 Unspecified vulnerability in Samsung Android 12.0/13.0/14.0
Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.
local
low complexity
samsung
5.5
2024-07-02 CVE-2024-20897 Unspecified vulnerability in Samsung Android 12.0/13.0/14.0
Use of implicit intent for sensitive communication in FCM function in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.
local
low complexity
samsung
5.5
2024-07-02 CVE-2024-20898 Unspecified vulnerability in Samsung Android 12.0/13.0/14.0
Use of implicit intent for sensitive communication in SoftphoneClient in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.
local
low complexity
samsung
5.5