CVSS: 5.9EPSS: 0%CPEs: 3EXPL: 0CVE-2022-33729
https://notcve.org/view.php?id=CVE-2022-33729
05 Aug 2022 — Improper restriction of broadcasting Intent in ConfirmConnectActivity of?NFC prior to SMR Aug-2022 Release 1 leaks MAC address of the connected Bluetooth device. Una restricción inapropiada de la intención de transmisión en ConfirmConnectActivity de NFC versiones anteriores a SMR Aug-2022 Release 1, filtra la dirección MAC del dispositivo Bluetooth conectado • https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=08 • CWE-20: Improper Input Validation •
CVSS: 6.4EPSS: 0%CPEs: 3EXPL: 0CVE-2022-33727
https://notcve.org/view.php?id=CVE-2022-33727
05 Aug 2022 — A vulnerable code in onCreate of SecDevicePickerDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwanted bluetooth device via tapjacking/overlay attack. Un código vulnerable en onCreate de SecDevicePickerDialog versiones anteriores a SMR Aug-2022 Release 1, permite a atacantes engañar al usuario para que seleccione un dispositivo bluetooth no deseado por medio de un ataque de tapjacking/overlay • https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=08 • CWE-1021: Improper Restriction of Rendered UI Layers or Frames •
CVSS: 6.4EPSS: 0%CPEs: 3EXPL: 0CVE-2022-33723
https://notcve.org/view.php?id=CVE-2022-33723
05 Aug 2022 — A vulnerable code in onCreate of BluetoothScanDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwanted bluetooth device via tapjacking/overlay attack. Un código vulnerable en onCreate de BluetoothScanDialog versiones anteriores a SMR Aug-2022 Release 1, permite a atacantes engañar al usuario para que seleccione un dispositivo bluetooth no deseado por medio de un ataque de tapjacking/overlay • https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=08 • CWE-1021: Improper Restriction of Rendered UI Layers or Frames •
CVSS: 6.7EPSS: 0%CPEs: 34EXPL: 0CVE-2022-26435
https://notcve.org/view.php?id=CVE-2022-26435
01 Aug 2022 — In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07138435; Issue ID: ALPS07138435. En mailbox, se presenta una posible escritura fuera de límites debido a una confusión de tipo. • https://corp.mediatek.com/product-security-bulletin/August-2022 • CWE-787: Out-of-bounds Write CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVSS: 6.7EPSS: 0%CPEs: 34EXPL: 0CVE-2022-26434
https://notcve.org/view.php?id=CVE-2022-26434
01 Aug 2022 — In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07138450; Issue ID: ALPS07138450. En mailbox, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites. • https://corp.mediatek.com/product-security-bulletin/August-2022 • CWE-787: Out-of-bounds Write •
CVSS: 6.7EPSS: 0%CPEs: 34EXPL: 0CVE-2022-26433
https://notcve.org/view.php?id=CVE-2022-26433
01 Aug 2022 — In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07138400; Issue ID: ALPS07138400. En mailbox, se presenta una posible escritura fuera de límites debido a una confusión de tipo. • https://corp.mediatek.com/product-security-bulletin/August-2022 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVSS: 6.7EPSS: 0%CPEs: 27EXPL: 0CVE-2022-26432
https://notcve.org/view.php?id=CVE-2022-26432
01 Aug 2022 — In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032542; Issue ID: ALPS07032542. En mailbox, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites. • https://corp.mediatek.com/product-security-bulletin/August-2022 • CWE-787: Out-of-bounds Write •
CVSS: 6.7EPSS: 0%CPEs: 27EXPL: 0CVE-2022-26431
https://notcve.org/view.php?id=CVE-2022-26431
01 Aug 2022 — In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032553; Issue ID: ALPS07032553. En mailbox, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites. • https://corp.mediatek.com/product-security-bulletin/August-2022 • CWE-787: Out-of-bounds Write •
CVSS: 6.7EPSS: 0%CPEs: 27EXPL: 0CVE-2022-26430
https://notcve.org/view.php?id=CVE-2022-26430
01 Aug 2022 — In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032521; Issue ID: ALPS07032521. En mailbox, se presenta una posible escritura fuera de límites debido a una confusión de tipo. • https://corp.mediatek.com/product-security-bulletin/August-2022 • CWE-787: Out-of-bounds Write CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVSS: 7.8EPSS: 0%CPEs: 43EXPL: 0CVE-2022-26429
https://notcve.org/view.php?id=CVE-2022-26429
01 Aug 2022 — In cta, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07025415; Issue ID: ALPS07025415. En cta, se presenta una posible forma de escribir registros de uso de permisos de una aplicación debido a una falta de comprobación de permisos. • https://corp.mediatek.com/product-security-bulletin/August-2022 • CWE-862: Missing Authorization •