CVE-2023-42539
https://notcve.org/view.php?id=CVE-2023-42539
PendingIntent hijacking vulnerability in ChallengeNotificationManager in Samsung Health prior to version 6.25 allows local attackers to access data. La vulnerabilidad de secuestro PendingIntent en ChallengeNotificationManager en Samsung Health anterior a la versión 6.25 permite a atacantes locales acceder a los datos. • https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11 •
CVE-2023-42538
https://notcve.org/view.php?id=CVE-2023-42538
An improper input validation in saped_rec_silence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write. Una validación de entrada incorrecta en saped_rec_silence en libsaped antes de SMR Nov-2023 Release 1 permite a un atacante provocar lecturas y escrituras fuera de los límites. • https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=11 • CWE-125: Out-of-bounds Read CWE-787: Out-of-bounds Write •
CVE-2023-42537
https://notcve.org/view.php?id=CVE-2023-42537
An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write. Una validación de entrada incorrecta en get_head_crc en libsaped antes de SMR Nov-2023 Release 1 permite al atacante provocar lecturas y escrituras fuera de los límites. • https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=11 • CWE-125: Out-of-bounds Read CWE-787: Out-of-bounds Write •
CVE-2023-42536
https://notcve.org/view.php?id=CVE-2023-42536
An improper input validation in saped_dec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write. Una validación de entrada incorrecta en saped_dec en libsaped antes de SMR Nov-2023 Release 1 permite que un atacante provoque lecturas y escrituras fuera de los límites. • https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=11 • CWE-125: Out-of-bounds Read CWE-787: Out-of-bounds Write •
CVE-2023-42535
https://notcve.org/view.php?id=CVE-2023-42535
Out-of-bounds Write in read_block of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code. La escritura fuera de los límites en read_block de vold antes de SMR Nov-2023 Release 1 permite a un atacante local ejecutar código arbitrario. • https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=11 • CWE-787: Out-of-bounds Write •