CVSS: 8.8EPSS: 0%CPEs: 8EXPL: 1CVE-2020-35693
https://notcve.org/view.php?id=CVE-2020-35693
24 Dec 2020 — On some Samsung phones and tablets running Android through 7.1.1, it is possible for an attacker-controlled Bluetooth Low Energy (BLE) device to pair silently with a vulnerable target device, without any user interaction, when the target device's Bluetooth is on, and it is running an app that offers a connectable BLE advertisement. An example of such an app could be a Bluetooth-based contact tracing app, such as Australia's COVIDSafe app, Singapore's TraceTogether app, or France's TousAntiCovid (formerly St... • https://github.com/alwentiu/contact-tracing-research/blob/main/samsung.pdf •
CVSS: 6.8EPSS: 0%CPEs: 2EXPL: 0CVE-2020-26964
https://notcve.org/view.php?id=CVE-2020-26964
09 Dec 2020 — If the Remote Debugging via USB feature was enabled in Firefox for Android on an Android version prior to Android 6.0, untrusted apps could have connected to the feature and operated with the privileges of the browser to read and interact with web content. The feature was implemented as a unix domain socket, protected by the Android SELinux policy; however, SELinux was not enforced for versions prior to 6.0. This was fixed by removing the Remote Debugging via USB feature from affected devices. *Note: This i... • https://bugzilla.mozilla.org/show_bug.cgi?id=1658865 •
CVSS: 7.5EPSS: 0%CPEs: 10EXPL: 0CVE-2020-25064
https://notcve.org/view.php?id=CVE-2020-25064
31 Aug 2020 — An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software. Certain automated testing is mishandled. The LG ID is LVE-SMP-200019 (August 2020). Se detectó un problema en los dispositivos móviles LG con software de Sistema Operativo Android versiones 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0 y 10. Determinadas pruebas automatizadas se manejan inapropiadamente. • https://lgsecurity.lge.com •
CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0CVE-2020-25065
https://notcve.org/view.php?id=CVE-2020-25065
31 Aug 2020 — An issue was discovered on LG mobile devices with Android OS 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0, and 10 software. Key logging may occur because of an obsolete API. The LG ID is LVE-SMP-170010 (August 2020). Se detectó un problema en los dispositivos móviles LG con software de Sistema Operativo Android versiones 4.4, 5.0, 5.1, 6.0, 7.0, 7.1, 8.0, 8.1, 9.0 y 10. El registro de claves puede ocurrir debido a una API obsoleta. • https://lgsecurity.lge.com • CWE-203: Observable Discrepancy •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-13843
https://notcve.org/view.php?id=CVE-2020-13843
04 Jun 2020 — An issue was discovered on LG mobile devices with Android OS software before 2020-06-01. Local users can cause a denial of service because checking of the userdata partition is mishandled. The LG ID is LVE-SMP-200014 (June 2020). Se detectó un problema en los dispositivos móviles LG con software de Sistema Operativo Android antes del 01-06-2020. Los usuarios locales pueden causar una denegación de servicio porque la comprobación de la partición de los datos de usuario se maneja inapropiadamente. • https://lgsecurity.lge.com •
CVSS: 7.5EPSS: 0%CPEs: 12EXPL: 0CVE-2018-21079
https://notcve.org/view.php?id=CVE-2018-21079
08 Apr 2020 — An issue was discovered on Samsung mobile devices with L(5.x), M(6.0), N(7.x), and O(8.0) software. There is a kernel pointer leak in the USB gadget driver. The Samsung ID is SVE-2017-10993 (March 2018). Se detectó un problema en dispositivos móviles Samsung con versiones de software L(5.x), M(6.0), N(7.x) y O(8.0). Se presenta una fuga del puntero del kernel en el controlador del gadget USB. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-401: Missing Release of Memory after Effective Lifetime •
CVSS: 8.1EPSS: 0%CPEs: 11EXPL: 0CVE-2018-21085
https://notcve.org/view.php?id=CVE-2018-21085
08 Apr 2020 — An issue was discovered on Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software. There is a race condition with a resultant use-after-free in vnswap_deinit_backing_storage. The Samsung ID is SVE-2017-11176 (February 2018). Se detectó un problema en dispositivos móviles Samsung con versiones de software L(5.x), M(6.0) y N(7.x). Se presenta una condición de carrera con un uso de la memoria previamente liberada resultante en vnswap_deinit_backing_storage. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CWE-416: Use After Free •
CVSS: 8.1EPSS: 0%CPEs: 11EXPL: 0CVE-2018-21086
https://notcve.org/view.php?id=CVE-2018-21086
08 Apr 2020 — An issue was discovered on Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software. There is a race condition with a resultant double free in vnswap_init_backing_storage. The Samsung ID is SVE-2017-11177 (February 2018). Se detectó un problema en dispositivos móviles Samsung con versiones de software L(5.x), M(6.0) y N(7.x). Se presenta una condición de carrera con una doble liberación resultante en vnswap_init_backing_storage. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CWE-415: Double Free •
CVSS: 9.8EPSS: 0%CPEs: 12EXPL: 0CVE-2018-21087
https://notcve.org/view.php?id=CVE-2018-21087
08 Apr 2020 — An issue was discovered on Samsung mobile devices with L(5.x), M(6.x), and N(7.x) software. There is a vnswap heap-based buffer overflow via the store function, with resultant privilege escalation. The Samsung ID is SVE-2017-10599 (January 2018). Se detectó un problema en dispositivos móviles Samsung con versiones de software L(5.x), M(6.x) y N(7.x). Se presenta un desbordamiento de búfer en la región heap de la memoria en vnswap por medio de la función store, con una escalada de privilegios resultante. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-787: Out-of-bounds Write •
CVSS: 9.1EPSS: 0%CPEs: 17EXPL: 0CVE-2017-18648
https://notcve.org/view.php?id=CVE-2017-18648
07 Apr 2020 — An issue was discovered on Samsung mobile devices with KK(4.4.x), L(5.x), M(6.x), and N(7.x) software. Arbitrary file read/write operations can occur in the locked state via a crafted MTP command. The Samsung ID is SVE-2017-10086 (November 2017). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4.x), L(5.x), M(6.x) y N(7.x). Las operaciones de lectura y escritura de archivos arbitrarios pueden ocurrir en el estado bloqueado por medio de un comando MTP diseñado. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-20: Improper Input Validation •