Page 5 of 1215 results (0.003 seconds)

CVSS: 4.9EPSS: 0%CPEs: 1EXPL: 0

CVE-2025-20883

https://notcve.org/view.php?id=CVE-2025-20883

04 Feb 2025 — Improper access control in SoundPicker prior to SMR Jan-2025 Release 1 allows physical attackers to access data across multiple user profiles. • https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=01 •

CVSS: 7.0EPSS: 0%CPEs: 1EXPL: 0

CVE-2025-20882

https://notcve.org/view.php?id=CVE-2025-20882

04 Feb 2025 — Out-of-bounds write in accessing uninitialized memory for svc1td in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability. • https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=01 •

CVSS: 7.0EPSS: 0%CPEs: 1EXPL: 0

CVE-2025-20881

https://notcve.org/view.php?id=CVE-2025-20881

04 Feb 2025 — Out-of-bounds write in accessing buffer storing the decoded video frames in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability. • https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=01 •

CVSS: 5.7EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-49422

https://notcve.org/view.php?id=CVE-2024-49422

31 Dec 2024 — Protection Mechanism Failure in bootloader prior to SMR Oct-2024 Release 1 allows physical attackers to reset lockscreen failure count by hardware fault injection. User interaction is required for triggering this vulnerability. Un fallo en el mecanismo de protección del cargador de arranque anterior a la versión 1 de SMR de octubre de 2024 permite a los atacantes físicos restablecer el recuento de fallos de la pantalla de bloqueo mediante la inyección de un fallo de hardware. Se requiere la interacción del ... • https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=10 •

CVSS: 7.6EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-49420

https://notcve.org/view.php?id=CVE-2024-49420

03 Dec 2024 — Improper handling of responses in GamingHub prior to version 6.1.04.6 in Korea, 7.1.03.7 in Global allows remote attackers to launch arbitrary activity. El manejo inadecuado de respuestas en GamingHub anterior a la versión 6.1.04.6 en Corea, 7.1.03.7 en Global permite a atacantes remotos iniciar actividad arbitraria. • https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=12 •

CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 1

CVE-2024-49415 – Samsung S24 APE Decoder Out-Of-Bounds Write

https://notcve.org/view.php?id=CVE-2024-49415

03 Dec 2024 — Out-of-bound write in libsaped.so prior to SMR Dec-2024 Release 1 allows remote attackers to execute arbitrary code. La escritura fuera de los límites en libsaped.so anterior a SMR Dec-2024 Release 1 permite a atacantes remotos ejecutar código arbitrario. There is an out-of-bounds write in the Monkey's Audio (APE) decoder on the Samsung S24. The function saped_rec in libsaped.so writes to a dmabuf allocated by the C2 media service, which always appears to have size 0x120000. While the maximum blocksperframe... • https://packetstorm.news/files/id/183463 •

CVSS: 2.4EPSS: 0%CPEs: 2EXPL: 0

CVE-2024-49414

https://notcve.org/view.php?id=CVE-2024-49414

03 Dec 2024 — Authentication Bypass Using an Alternate Path in Dex Mode prior to SMR Dec-2024 Release 1 allows physical attackers to temporarily access to recent app list. La omisión de autenticación mediante una ruta alternativa en el Dex Mode antes de la versión 1 de SMR de diciembre de 2024 permite a los atacantes físicos acceder temporalmente a la lista de aplicaciones recientes. • https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=12 •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2024-49413

https://notcve.org/view.php?id=CVE-2024-49413

03 Dec 2024 — Improper Verification of Cryptographic Signature in SmartSwitch prior to SMR Dec-2024 Release 1 allows local attackers to install malicious applications. La verificación incorrecta de la firma criptográfica en SmartSwitch antes de la versión 1 de SMR de diciembre de 2024 permite que los atacantes locales instalen aplicaciones maliciosas. • https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=12 •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-49412

https://notcve.org/view.php?id=CVE-2024-49412

03 Dec 2024 — Improper input validation in Settings prior to SMR Dec-2024 Release 1 allows local attackers to broadcast signal for discovering Bluetooth on Galaxy Watch. La validación de entrada incorrecta en Settings anteriores a la versión 1 de SMR de diciembre de 2024 permite que atacantes locales transmitan señales para descubrir Bluetooth en Galaxy Watch. • https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=12 •

CVSS: 4.9EPSS: 0%CPEs: 2EXPL: 0

CVE-2024-49411

https://notcve.org/view.php?id=CVE-2024-49411

03 Dec 2024 — Path Traversal in ThemeCenter prior to SMR Dec-2024 Release 1 allows physical attackers to copy apk files to arbitrary path with ThemeCenter privilege. La travesía de ruta en ThemeCenter antes de SMR Dec-2024 Release 1 permite a atacantes físicos copiar archivos apk en una ruta arbitraria con el privilegio de ThemeCenter. • https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=12 •