PRIOn Logo

Search KB


Search our pre-analyzed vulnerability database

Total Results: 791

of 40

Published:   Updated:

Vulnerability Type: Code injection

Vendor(s):  Samsung
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v37.5

An issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem (Exynos 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, Modem 5123, Modem 5300, and Auto T5123). A buffer copy, without checking the size of the input, can cause abnormal termination of a mobile phone. This occurs in the RLC task and RLC module.

Published:   Updated:

Vulnerability Type: Input validation

Vendor(s):  Samsung
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v37.5

An issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem (Exynos 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, Modem 5123, Modem 5300, and Auto T5123). Improper handling of a length parameter inconsistency can cause abnormal termination of a mobile phone. This occurs in the RLC task and RLC module.

Published:   Updated:

Vulnerability Type: Authentication flaw

Vendor(s):  Samsung
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v34.3

Improper Restriction of Excessive Authentication Attempts vulnerability in Samsung Smart TV UE40D7000 version T-GAPDEUC-1033.2 and before allows attackers to cause a denial of service via WPS attack tools.

Published:   Updated:

Vulnerability Type: Design/Logic Flaw

Vendor(s):  Samsung
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v35.5

Use of implicit intent for sensitive communication vulnerability in EasySetup prior to version 11.1.13 allows attackers to get the bluetooth address of user device.

Published:   Updated:

Vulnerability Type: Authentication flaw

Vendor(s):  Samsung
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v36.8

Improper Authentication vulnerabiity in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication.

Published:   Updated:

Vulnerability Type: Authorization

Vendor(s):  Samsung
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v35.3

Improper authorization verification vulnerability in Samsung Email prior to version 6.1.90.4 allows attackers to read sandbox data of email.

Published:   Updated:

Vulnerability Type: Design/Logic Flaw

Vendor(s):  Samsung
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v33.3

Implicit intent hijacking vulnerability in Firewall application prior to versions 12.1.00.24 in Android 11, 13.1.00.16 in Android 12 and 14.1.00.7 in Android 13 allows 3rd party application to tamper the database of Firewall.

Published:   Updated:

Vulnerability Type: Design/Logic Flaw

Vendor(s):  Samsung
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v36.5

Use of implicit intent for sensitive communication vulnerability in startTncActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.

Published:   Updated:

Vulnerability Type: Privilege escalation

Vendor(s):  Samsung
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v36.5

Use of implicit intent for sensitive communication vulnerability in startSignIn in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.

Published:   Updated:

Vulnerability Type: Design/Logic Flaw

Vendor(s):  Samsung
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v36.5

Use of implicit intent for sensitive communication vulnerability in startNameValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.

Published:   Updated:

Vulnerability Type: Design/Logic Flaw

Vendor(s):  Samsung
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v36.5

Use of implicit intent for sensitive communication vulnerability in startMandatoryCheckActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.

Published:   Updated:

Vulnerability Type: Design/Logic Flaw

Vendor(s):  Samsung
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v36.5

Use of implicit intent for sensitive communication vulnerability in startEmailValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.

Published:   Updated:

Vulnerability Type: Design/Logic Flaw

Vendor(s):  Samsung
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v36.5

Use of implicit intent for sensitive communication vulnerability in startAgreeToDisclaimerActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.

Published:   Updated:

Vulnerability Type: Design/Logic Flaw

Vendor(s):  Samsung
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v37.5

Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and 14.7.38 in Android 13 allows attackers to access location data.

Published:   Updated:

Vulnerability Type: Improper access control

Vendor(s):  Samsung
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v35.5

Improper access control vulnerability in Quick Share prior to 13.5.52.0 allows local attacker to access local files.

Published:   Updated:

Vulnerability Type: Input validation

Vendor(s):  Samsung
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v37.5

Improper verification of intent by broadcast receiver vulnerability in Bixby Voice prior to version 3.3.35.12 allows attackers to access arbitrary data with Bixby Voice privilege.

Published:   Updated:

Vulnerability Type: Improper access control

Vendor(s):  Samsung
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v33.3

Improper access control vulnerability in Samsung Push Service prior to 3.4.10 allows local attackers to get register ID to identify the device.

Published:   Updated:

Vulnerability Type: Authorization

Vendor(s):  Samsung
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v35.3

Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id.

Published:   Updated:

Vulnerability Type: Improper access control

Vendor(s):  Samsung
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v35.5

Improper access control vulnerability in Samsung Account prior to version 14.5.01.1 allows attackers to access sensitive information via implicit intent.

Published:   Updated:

Vulnerability Type: Spoofing

Vendor(s):  Samsung
Routine
Remediate Within 6 Months
CVSS v2N/ACVSS v35.5

PendingIntent hijacking vulnerability in ChallengeNotificationManager in Samsung Health prior to version 6.25 allows local attackers to access data.

of 40