CVSS: 5.5EPSS: 0%CPEs: 17EXPL: 0CVE-2022-48232
https://notcve.org/view.php?id=CVE-2022-48232
In FM service , there is a possible missing params check. This could lead to local denial of service in FM service . • https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761 • CWE-787: Out-of-bounds Write •
CVSS: 7.1EPSS: 0%CPEs: 51EXPL: 0CVE-2023-21489
https://notcve.org/view.php?id=CVE-2023-21489
Heap out-of-bounds write vulnerability in bootloader prior to SMR May-2023 Release 1 allows a physical attacker to execute arbitrary code. • https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05 • CWE-787: Out-of-bounds Write •
CVSS: 5.5EPSS: 0%CPEs: 51EXPL: 0CVE-2023-21495
https://notcve.org/view.php?id=CVE-2023-21495
Improper access control vulnerability in Knox Enrollment Service prior to SMR May-2023 Release 1 allow attacker install KSP app when device admin is set. • https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05 • CWE-284: Improper Access Control •
CVSS: 7.8EPSS: 0%CPEs: 24EXPL: 0CVE-2023-21502
https://notcve.org/view.php?id=CVE-2023-21502
Improper input validation vulnerability in FactoryTest application prior to SMR May-2023 Release 1 allows local attackers to get privilege escalation via debugging commands. • https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05 • CWE-20: Improper Input Validation •
CVSS: 8.5EPSS: 0%CPEs: 24EXPL: 0CVE-2023-21491
https://notcve.org/view.php?id=CVE-2023-21491
Improper access control vulnerability in ThemeManager prior to SMR May-2023 Release 1 allows local attackers to write arbitrary files with system privilege. • https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05 • CWE-284: Improper Access Control •