CVSS: 4.4EPSS: 0%CPEs: 60EXPL: 0CVE-2023-32876
https://notcve.org/view.php?id=CVE-2023-32876
02 Jan 2024 — In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308612; Issue ID: ALPS08308612. En keyInstall, existe una posible divulgación de información debido a una verificación de los límites faltantes. • https://corp.mediatek.com/product-security-bulletin/January-2024 • CWE-125: Out-of-bounds Read •
CVSS: 4.4EPSS: 0%CPEs: 60EXPL: 0CVE-2023-32875
https://notcve.org/view.php?id=CVE-2023-32875
02 Jan 2024 — In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308607; Issue ID: ALPS08304217. En keyInstall, existe una posible divulgación de información debido a una verificación de los límites faltantes. • https://corp.mediatek.com/product-security-bulletin/January-2024 • CWE-125: Out-of-bounds Read •
CVSS: 6.7EPSS: 0%CPEs: 60EXPL: 0CVE-2023-32872
https://notcve.org/view.php?id=CVE-2023-32872
02 Jan 2024 — In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308607; Issue ID: ALPS08308607. En keyInstall, existe una posible escritura fuera de los límites debido a una verificación de los límites faltantes. • https://corp.mediatek.com/product-security-bulletin/January-2024 • CWE-787: Out-of-bounds Write •
CVSS: 6.3EPSS: 28%CPEs: 28EXPL: 8CVE-2023-45866 – bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution
https://notcve.org/view.php?id=CVE-2023-45866
07 Dec 2023 — Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue. Bluetooth HID Hosts in BlueZ ... • https://github.com/pentestfunctions/BlueDucky • CWE-285: Improper Authorization CWE-287: Improper Authentication •
CVSS: 7.8EPSS: 0%CPEs: 16EXPL: 0CVE-2023-42563
https://notcve.org/view.php?id=CVE-2023-42563
05 Dec 2023 — Integer overflow vulnerability in landmarkCopyImageToNative of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow. Vulnerabilidad de desbordamiento de enteros en LandmarkCopyImageToNative de libFacePreProcessingjni.camera.samsung.so antes de SMR Dec-2023 Release 1 permite al atacante desencadenar un desbordamiento del heap. • https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12 • CWE-190: Integer Overflow or Wraparound •
CVSS: 6.5EPSS: 0%CPEs: 12EXPL: 0CVE-2023-42579
https://notcve.org/view.php?id=CVE-2023-42579
05 Dec 2023 — Improper usage of insecure protocol (i.e. HTTP) in SogouSDK of Chinese Samsung Keyboard prior to versions 5.3.70.1 in Android 11, 5.4.60.49, 5.4.85.5, 5.5.00.58 in Android 12, and 5.6.00.52, 5.6.10.42, 5.7.00.45 in Android 13 allows adjacent attackers to access keystroke data using Man-in-the-Middle attack. Uso inadecuado de un protocolo inseguro (es decir, HTTP) en SogouSDK of Chinese Samsung Keyboard anterior a las versiones 5.3.70.1 en Android 11, 5.4.60.49, 5.4.85.5, 5.5.00.58 en Android 12 y 5.6.00.52,... • https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12 • CWE-319: Cleartext Transmission of Sensitive Information •
CVSS: 6.8EPSS: 0%CPEs: 5EXPL: 0CVE-2023-42577
https://notcve.org/view.php?id=CVE-2023-42577
05 Dec 2023 — Improper Access Control in Samsung Voice Recorder prior to versions 21.4.15.01 in Android 12 and Android 13, 21.4.50.17 in Android 14 allows physical attackers to access Voice Recorder information on the lock screen. El control de acceso inadecuado en Samsung Voice Recorder anterior a las versiones 21.4.15.01 en Android 12 y Android 13, 21.4.50.17 en Android 14 permite a atacantes físicos acceder a la información de Voice Recorder en la pantalla de bloqueo. • https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12 •
CVSS: 5.9EPSS: 0%CPEs: 16EXPL: 0CVE-2023-42570
https://notcve.org/view.php?id=CVE-2023-42570
05 Dec 2023 — Improper access control vulnerability in KnoxCustomManagerService prior to SMR Dec-2023 Release 1 allows attacker to access device SIM PIN. Una vulnerabilidad de control de acceso inadecuado en KnoxCustomManagerService anterior a la versión 1 de SMR de diciembre de 2023 permite al atacante acceder al PIN de la SIM del dispositivo. • https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12 •
CVSS: 4.0EPSS: 0%CPEs: 16EXPL: 0CVE-2023-42569
https://notcve.org/view.php?id=CVE-2023-42569
05 Dec 2023 — Improper authorization verification vulnerability in AR Emoji prior to SMR Dec-2023 Release 1 allows attackers to read sandbox data of AR Emoji. Una vulnerabilidad de verificación de autorización inadecuada en AR Emoji antes de la versión 1 de SMR de diciembre de 2023 permite a los atacantes leer datos de la zona de pruebas de AR Emoji. • https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12 • CWE-863: Incorrect Authorization •
CVSS: 7.3EPSS: 0%CPEs: 16EXPL: 0CVE-2023-42568
https://notcve.org/view.php?id=CVE-2023-42568
05 Dec 2023 — Improper access control vulnerability in SmartManagerCN prior to SMR Dec-2023 Release 1 allows local attackers to access arbitrary files with system privilege. Una vulnerabilidad de control de acceso inadecuado en SmartManagerCN anterior a SMR Dec-2023 Release 1 permite a atacantes locales acceder a archivos arbitrarios con privilegios SystemUI. • https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12 •