Latest Samsung Vulnerabilities

● CVE-2024-23769
Improper privilege control for the named pipe in Samsung Magician PC Software 8.0.0 (for Windows) allows a local attacker to read privileged data.
Samsung Magician=8.0.0
Microsoft Windows
● CVE-2024-20828
Improper authorization verification vulnerability in Samsung Internet prior to version 24.0 allows physical attackers to access files downloaded in SecretMode without proper authentication.
Samsung Internet<24.0
● CVE-2024-20827
Improper access control vulnerability in Samsung Gallery prior to version 14.5.04.4 allows physical attackers to access the picture using physical keyboard on the lockscreen.
Samsung Gallery<14.5.04.4
● CVE-2024-20826
Implicit intent hijacking vulnerability in UPHelper library prior to version 4.0.0 allows local attackers to access sensitive information via implicit intent.
Samsung Uphelper Library<4.0.0
● CVE-2024-20825
Implicit intent hijacking vulnerability in IAP of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent.
Samsung Galaxy Store<4.5.63.6
● CVE-2024-20824
Implicit intent hijacking vulnerability in VoiceSearch of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent.
Samsung Galaxy Store<4.5.63.6
● CVE-2024-20823
Implicit intent hijacking vulnerability in SamsungAccount of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent.
Samsung Galaxy Store<4.5.63.6
● CVE-2024-20822
Implicit intent hijacking vulnerability in AccountActivity of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent.
Samsung Galaxy Store<4.5.63.6
● CVE-2024-20820
Improper input validation in bootloader prior to SMR Feb-2024 Release 1 allows local privileged attackers to cause an Out-Of-Bounds read.
Samsung Android=11.0
Samsung Android=11.0-smr-apr-2021-r1
Samsung Android=11.0-smr-apr-2022-r1
Samsung Android=11.0-smr-apr-2023-r1
Samsung Android=11.0-smr-aug-2021-r1
Samsung Android=11.0-smr-aug-2022-r1
and 81 more
● CVE-2024-20819
Out-of-bounds Write vulnerabilities in svc1td_vld_plh_ap of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.
=11.0
=11.0-smr-apr-2021-r1
=11.0-smr-apr-2022-r1
=11.0-smr-apr-2023-r1
=11.0-smr-aug-2021-r1
=11.0-smr-aug-2022-r1
and 83 more
● CVE-2024-20818
Out-of-bounds Write vulnerabilities in svc1td_vld_elh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.
=11.0
=11.0-smr-apr-2021-r1
=11.0-smr-apr-2022-r1
=11.0-smr-apr-2023-r1
=11.0-smr-aug-2021-r1
=11.0-smr-aug-2022-r1
and 83 more
● CVE-2024-20817
Out-of-bounds Write vulnerabilities in svc1td_vld_slh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.
=11.0
=11.0-smr-apr-2021-r1
=11.0-smr-apr-2022-r1
=11.0-smr-apr-2023-r1
=11.0-smr-aug-2021-r1
=11.0-smr-aug-2022-r1
and 83 more
● CVE-2024-20816
Improper authentication vulnerability in onCharacteristicWriteRequest in Auto Hotspot prior to SMR Feb-2024 Release 1 allows adjacent attackers connect to victim&#39;s mobile hotspot without user awar...
Samsung Android=11.0
Samsung Android=11.0-smr-apr-2021-r1
Samsung Android=11.0-smr-apr-2022-r1
Samsung Android=11.0-smr-apr-2023-r1
Samsung Android=11.0-smr-aug-2021-r1
Samsung Android=11.0-smr-aug-2022-r1
and 83 more
● CVE-2024-20815
Improper authentication vulnerability in onCharacteristicReadRequest in Auto Hotspot prior to SMR Feb-2024 Release 1 allows adjacent attackers connect to victim&#39;s mobile hotspot without user aware...
Samsung Android=11.0
Samsung Android=11.0-smr-apr-2021-r1
Samsung Android=11.0-smr-apr-2022-r1
Samsung Android=11.0-smr-apr-2023-r1
Samsung Android=11.0-smr-aug-2021-r1
Samsung Android=11.0-smr-aug-2022-r1
and 83 more
● CVE-2024-20814
Out-of-bounds Read in padmd_vld_ac_prog_refine of libpadm.so prior to SMR Feb-2024 Release 1 allows local attackers access unauthorized information.
Samsung Android=11.0
Samsung Android=11.0-smr-apr-2021-r1
Samsung Android=11.0-smr-apr-2022-r1
Samsung Android=11.0-smr-apr-2023-r1
Samsung Android=11.0-smr-aug-2021-r1
Samsung Android=11.0-smr-aug-2022-r1
and 83 more
● CVE-2024-20813
Out-of-bounds Write in padmd_vld_qtbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code.
Samsung Android=11.0
Samsung Android=11.0-smr-apr-2021-r1
Samsung Android=11.0-smr-apr-2022-r1
Samsung Android=11.0-smr-apr-2023-r1
Samsung Android=11.0-smr-aug-2021-r1
Samsung Android=11.0-smr-aug-2022-r1
and 83 more
● CVE-2024-20812
Out-of-bounds Write in padmd_vld_htbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code.
Samsung Android=11.0
Samsung Android=11.0-smr-apr-2021-r1
Samsung Android=11.0-smr-apr-2022-r1
Samsung Android=11.0-smr-apr-2023-r1
Samsung Android=11.0-smr-aug-2021-r1
Samsung Android=11.0-smr-aug-2022-r1
and 83 more
● CVE-2024-20811
Improper caller verification in GameOptimizer prior to SMR Feb-2024 Release 1 allows local attackers to configure GameOptimizer.
Samsung Android=11.0
Samsung Android=11.0-smr-apr-2021-r1
Samsung Android=11.0-smr-apr-2022-r1
Samsung Android=11.0-smr-apr-2023-r1
Samsung Android=11.0-smr-aug-2021-r1
Samsung Android=11.0-smr-aug-2022-r1
and 83 more
● CVE-2024-20810
Implicit intent hijacking vulnerability in Smart Suggestions prior to SMR Feb-2024 Release 1 allows local attackers to get sensitive information.
Samsung Android=12.0
Samsung Android=12.0-smr-apr-2022-r1
Samsung Android=12.0-smr-apr-2023-r1
Samsung Android=12.0-smr-aug-2022-r1
Samsung Android=12.0-smr-aug-2023-r1
Samsung Android=12.0-smr-dec-2021-r1
and 39 more
● CVE-2024-20809
Improper access control vulnerability in Nearby device scanning prior version 11.1.14.7 allows local attacker to access data.
Samsung Nearby Device Scanning<11.1.14.7
● CVE-2024-20808
Improper access control vulnerability in Nearby device scanning prior version 11.1.14.7 allows local attacker to access data.
Samsung Nearby Device Scanning<11.1.14.7
● CVE-2024-20807
Implicit intent hijacking vulnerability in Samsung Email prior to version 6.1.90.16 allows local attacker to get sensitive information.
Samsung Email<6.1.90.16
● CVE-2024-20806
Improper access control in Notification service prior to SMR Jan-2024 Release 1 allows local attacker to access notification data.
Samsung Android=11.0
Samsung Android=11.0-smr-apr-2021-r1
Samsung Android=11.0-smr-apr-2022-r1
Samsung Android=11.0-smr-apr-2023-r1
Samsung Android=11.0-smr-aug-2021-r1
Samsung Android=11.0-smr-aug-2022-r1
and 91 more
● CVE-2024-20805
Path traversal vulnerability in ZipCompressor of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrary fi...
Samsung Android=11.0
Samsung Android=11.0-smr-apr-2021-r1
Samsung Android=11.0-smr-apr-2022-r1
Samsung Android=11.0-smr-apr-2023-r1
Samsung Android=11.0-smr-aug-2021-r1
Samsung Android=11.0-smr-aug-2022-r1
and 76 more
● CVE-2024-20804
Path traversal vulnerability in FileUriConverter of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrary...
Samsung Android=11.0
Samsung Android=11.0-smr-apr-2021-r1
Samsung Android=11.0-smr-apr-2022-r1
Samsung Android=11.0-smr-apr-2023-r1
Samsung Android=11.0-smr-aug-2021-r1
Samsung Android=11.0-smr-aug-2022-r1
and 76 more
● CVE-2024-20803
Improper authentication vulnerability in Bluetooth pairing process prior to SMR Jan-2024 Release 1 allows remote attackers to establish pairing process without user interaction.
Samsung Android=11.0
Samsung Android=11.0-smr-apr-2021-r1
Samsung Android=11.0-smr-apr-2022-r1
Samsung Android=11.0-smr-apr-2023-r1
Samsung Android=11.0-smr-aug-2021-r1
Samsung Android=11.0-smr-aug-2022-r1
and 90 more
● CVE-2024-20802
Improper access control vulnerability in Samsung DeX prior to SMR Jan-2024 Release 1 allows owner to access other users&#39; notification in a multi-user environment.
Samsung DeX<smr_jan-2024_release_1
● CVE-2023-43122
Samsung Mobile Processor and Wearable Processor (Exynos 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, and W920) allow Information Disclosure in the Bootloader.
Samsung Exynos 980 Firmware
Samsung Exynos 980
Samsung Exynos 850 Firmware
Samsung Exynos 850
Samsung Exynos 1080 Firmware
Samsung Exynos 1080
and 12 more
● CVE-2023-45864
A race condition issue discovered in Samsung Mobile Processor Exynos 9820, 980, 1080, 2100, 2200, 1280, and 1380 allows unintended modifications of values within certain areas.
Samsung Exynos 9820 Firmware
Samsung Exynos 9820
Samsung Exynos 980 Firmware
Samsung Exynos 980
Samsung Exynos 1080 Firmware
Samsung Exynos 1080
and 8 more
● CVE-2023-42483
Samsung Exynos 9820 Firmware
Samsung Exynos 9820
Samsung Exynos 980 Firmware
Samsung Exynos 980
Samsung Exynos 1080 Firmware
Samsung Exynos 1080
and 8 more
● CVE-2023-41268
Possible stack overflow due to insufficient input validation
Samsung Escargot=3.0.0
Samsung Escargot=4.0.0
● CVE-2023-42563
Integer overflow vulnerability in landmarkCopyImageToNative of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow.
Samsung Android>=12.0<14.0
Samsung Android=14.0
Samsung Android=14.0-smr-apr-2023-r1
Samsung Android=14.0-smr-aug-2023-r1
Samsung Android=14.0-smr-dec-2022-r1
Samsung Android=14.0-smr-feb-2023-r1
and 10 more
● CVE-2023-42581
Improper URL validation from InstantPlay deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to access data.
Samsung Galaxy Store<4.5.64.4
● CVE-2023-42580
Improper URL validation from MCSLaunch deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to install APK from Galaxy Store.
Samsung Galaxy Store<4.5.64.4
● CVE-2023-42578
Improper handling of insufficient permissions or privileges vulnerability in Samsung Data Store prior to version 5.2.00.7 allows remote attackers to access location information without permission.
Samsung Cloud<=5.2.00.7
● CVE-2023-42577
Improper Access Control in Samsung Voice Recorder prior to versions 21.4.15.01 in Android 12 and Android 13, 21.4.50.17 in Android 14 allows physical attackers to access Voice Recorder information on ...
<21.4.15.01
Samsung Android=12.0
Samsung Android=13.0
<21.4.50.17
Samsung Android=14.0
● CVE-2023-42576
Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid exception handler.
Samsung Pass<4.3.00.17
● CVE-2023-42575
Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid flag setting.
Samsung Pass<4.3.00.17
● CVE-2023-42574
Improper access control vulnerablility in GameHomeCN prior to version 4.2.60.2 allows local attackers to launch arbitrary activity in GameHomeCN.
<4.2.60.2
● CVE-2023-42573
PendingIntent hijacking vulnerability in Search Widget prior to version 3.4 in China models allows local attackers to access data.
<3.4
● CVE-2023-42572
Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensitive information.
<1.5.24
● CVE-2023-42571
Abuse of remote unlock in Find My Mobile prior to version 7.3.13.4 allows physical attacker to unlock the device remotely by resetting the Samsung Account password with SMS verification when user lost...
Samsung Find My Mobile<7.3.13.4
● CVE-2023-42570
Improper access control vulnerability in KnoxCustomManagerService prior to SMR Dec-2023 Release 1 allows attacker to access device SIM PIN.
Samsung Android>=11.0<14.0
Samsung Android=14.0
Samsung Android=14.0-smr-apr-2023-r1
Samsung Android=14.0-smr-aug-2023-r1
Samsung Android=14.0-smr-dec-2022-r1
Samsung Android=14.0-smr-feb-2023-r1
and 10 more
● CVE-2023-42569
Improper authorization verification vulnerability in AR Emoji prior to SMR Dec-2023 Release 1 allows attackers to read sandbox data of AR Emoji.
Samsung Android>=11.0<13.0
Samsung Android=13.0
Samsung Android=13.0-smr-apr-2023-r1
Samsung Android=13.0-smr-aug-2023-r1
Samsung Android=13.0-smr-dec-2022-r1
Samsung Android=13.0-smr-feb-2023-r1
and 10 more
● CVE-2023-42568
Improper access control vulnerability in SmartManagerCN prior to SMR Dec-2023 Release 1 allows local attackers to access arbitrary files with system privilege.
Samsung Android>=12.0<13.0
Samsung Android=13.0
Samsung Android=13.0-smr-apr-2023-r1
Samsung Android=13.0-smr-aug-2023-r1
Samsung Android=13.0-smr-dec-2022-r1
Samsung Android=13.0-smr-feb-2023-r1
and 10 more
● CVE-2023-42567
Improper size check vulnerability in softsimd prior to SMR Dec-2023 Release 1 allows stack-based buffer overflow.
Samsung Android=14.0
Samsung Android=14.0-smr-apr-2023-r1
Samsung Android=14.0-smr-aug-2023-r1
Samsung Android=14.0-smr-dec-2022-r1
Samsung Android=14.0-smr-feb-2023-r1
Samsung Android=14.0-smr-jan-2023-r1
and 9 more
● CVE-2023-42565
Samsung Android>=13.0<14.0
Samsung Android=14.0
Samsung Android=14.0-smr-apr-2023-r1
Samsung Android=14.0-smr-aug-2023-r1
Samsung Android=14.0-smr-dec-2022-r1
Samsung Android=14.0-smr-feb-2023-r1
and 10 more
● CVE-2023-42564
Improper access control in knoxcustom service prior to SMR Dec-2023 Release 1 allows attacker to send broadcast with system privilege.
Samsung Android>=12.0<14.0
Samsung Android=14.0
Samsung Android=14.0-smr-apr-2023-r1
Samsung Android=14.0-smr-aug-2023-r1
Samsung Android=14.0-smr-dec-2022-r1
Samsung Android=14.0-smr-feb-2023-r1
and 10 more
● CVE-2023-42562
Integer overflow vulnerability in detectionFindFaceSupportMultiInstance of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow.
Samsung Android>=12.0<14.0
Samsung Android=14.0
Samsung Android=14.0-smr-apr-2023-r1
Samsung Android=14.0-smr-aug-2023-r1
Samsung Android=14.0-smr-dec-2022-r1
Samsung Android=14.0-smr-feb-2023-r1
and 10 more
● CVE-2023-42561
Heap out-of-bounds write vulnerability in bootloader prior to SMR Dec-2023 Release 1 allows a physical attacker to execute arbitrary code.
Samsung Android>=11.0<14.0
Samsung Android=14.0
Samsung Android=14.0-smr-apr-2023-r1
Samsung Android=14.0-smr-aug-2023-r1
Samsung Android=14.0-smr-dec-2022-r1
Samsung Android=14.0-smr-feb-2023-r1
and 10 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203