CVSS: 9.8EPSS: 0%CPEs: 5EXPL: 0CVE-2017-18693
https://notcve.org/view.php?id=CVE-2017-18693
07 Apr 2020 — An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. There is a buffer overflow in the fps sysfs entry. The Samsung ID is SVE-2016-7510 (January 2017). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0/5.1), M(6.0) y N(7.0). Se presenta un desbordamiento de búfer en la entrada fps sysfs. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0CVE-2017-18695
https://notcve.org/view.php?id=CVE-2017-18695
07 Apr 2020 — An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. Attackers (who control a certain subdomain) can discover a user's credentials, during an email account login, via an EAS autodiscover packet. The Samsung ID is SVE-2016-7654 (January 2017). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0/5.1), M(6.0), y N(7.0). Los atacantes (que controlan un determinado subdominio) pueden detectar las credenciales de un us... • https://security.samsungmobile.com/securityUpdate.smsb • CWE-522: Insufficiently Protected Credentials •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2016-11026
https://notcve.org/view.php?id=CVE-2016-11026
07 Apr 2020 — An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. BootReceiver allows attackers to trigger a system crash because of incorrect exception handling. The Samsung ID is SVE-2016-7118 (December 2016). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0/5.1) y M(6.0). BootReceiver permite a atacantes activar un bloqueo del sistema debido al manejo incorrecto de excepciones. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-755: Improper Handling of Exceptional Conditions •
CVSS: 8.1EPSS: 0%CPEs: 4EXPL: 0CVE-2016-11030
https://notcve.org/view.php?id=CVE-2016-11030
07 Apr 2020 — An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) (with Hrm sensor support) software. The sysfs of the MAX86902 sensor driver does not prevent concurrent access, leading to a race condition and resultant heap-based buffer overflow. The Samsung ID is SVE-2016-7341 (December 2016). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0/5.1) y M(6.0) (con soporte de sensor Hrm). El sysfs del controlador del sensor MAX86902 no impide ... • https://security.samsungmobile.com/securityUpdate.smsb • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2016-11031
https://notcve.org/view.php?id=CVE-2016-11031
07 Apr 2020 — An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. AntService allows a system_server crash and reboot. The Samsung ID is SVE-2016-7044 (November 2016). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0/5.1) y M(6.0). AntService permite un bloqueo y reinicio de system_server. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2016-11039
https://notcve.org/view.php?id=CVE-2016-11039
07 Apr 2020 — An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) (AP + CP MDM9x35, or Qualcomm Onechip) software. There is a NULL pointer dereference issue in the IPC socket code. The Samsung ID is SVE-2016-5980 (July 2016). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0/5.1) y M(6.0) (AP + CP MDM9x35 o Qualcomm Onechip). Se presenta un problema de desreferencia del puntero NULL en el código de socket IPC. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-476: NULL Pointer Dereference •
CVSS: 4.6EPSS: 0%CPEs: 1EXPL: 0CVE-2016-11041
https://notcve.org/view.php?id=CVE-2016-11041
07 Apr 2020 — An issue was discovered on Samsung mobile devices with KK(4.4) software. Attackers can bypass the lockscreen by sending an AT command over USB. The Samsung ID is SVE-2015-5301 (June 2016). Se detectó un problema en dispositivos móviles Samsung con versión de software KK(4.4). Los atacantes pueden omitir la pantalla de bloqueo mediante el envío de un comando AT a través de USB. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-287: Improper Authentication •
CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0CVE-2016-11046
https://notcve.org/view.php?id=CVE-2016-11046
07 Apr 2020 — An issue was discovered on Samsung mobile devices with JBP(4.3), KK(4.4), and L(5.0/5.1) software. Because of a misused whitelist, attackers can reach the radio layer (aka RIL or RILD) to place calls or send SMS messages. The Samsung ID is SVE-2016-5733 (May 2016). Se detectó un problema en dispositivos móviles Samsung con versiones de software JBP(4.3), KK(4.4) y L(5.0/5.1). Debido a una lista blanca usada inapropiadamente, unos atacantes pueden alcanzar la capa radio (también se conoce como RIL o RILD) pa... • https://security.samsungmobile.com/securityUpdate.smsb • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2016-11047
https://notcve.org/view.php?id=CVE-2016-11047
07 Apr 2020 — An issue was discovered on Samsung mobile devices with JBP(4.2) and KK(4.4) (Marvell chipsets) software. The ACIPC-MSOCKET driver allows local privilege escalation via a stack-based buffer overflow. The Samsung ID is SVE-2016-5393 (April 2016). Se detectó un problema en dispositivos móviles Samsung con versiones de software versiones JBP(4.2) y KK(4.4) (chipsets Marvell). El controlador ACIPC-MSOCKET permite una escalada de privilegios locales por medio de un desbordamiento de búfer en la región stack de la... • https://security.samsungmobile.com/securityUpdate.smsb • CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2011-3901
https://notcve.org/view.php?id=CVE-2011-3901
12 Feb 2020 — Android SQLite Journal before 4.0.1 has an information disclosure vulnerability. Android SQLite Journal versión anterior a 4.0.1, presenta una vulnerabilidad de divulgación de información. • http://www.securityfocus.com/bid/53380 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •