CVSS: 3.3EPSS: 0%CPEs: 1EXPL: 0CVE-2023-21431
https://notcve.org/view.php?id=CVE-2023-21431
Improper input validation in Bixby Vision prior to version 3.7.70.17 allows attacker to access data of Bixby Vision. • https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=01 • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 0%CPEs: 128EXPL: 0CVE-2023-21430
https://notcve.org/view.php?id=CVE-2023-21430
An out-of-bound read vulnerability in mapToBuffer function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR JAN-2023 Release 1 allows attacker to cause memory access fault. • https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=01 • CWE-125: Out-of-bounds Read •
CVSS: 7.8EPSS: 0%CPEs: 78EXPL: 0CVE-2023-21445
https://notcve.org/view.php?id=CVE-2023-21445
Improper access control vulnerability in MyFiles prior to versions 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android T(13) allows local attacker to write file with MyFiles privilege via implicit intent. • https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02 • CWE-284: Improper Access Control CWE-668: Exposure of Resource to Wrong Sphere •
CVSS: 2.4EPSS: 0%CPEs: 63EXPL: 0CVE-2023-21438
https://notcve.org/view.php?id=CVE-2023-21438
Improper logic in HomeScreen prior to SMR Feb-2023 Release 1 allows physical attacker to access App preview protected by Secure Folder. • https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02 • CWE-284: Improper Access Control CWE-668: Exposure of Resource to Wrong Sphere •
CVSS: 7.4EPSS: 0%CPEs: 113EXPL: 0CVE-2023-21441
https://notcve.org/view.php?id=CVE-2023-21441
Insufficient Verification of Data Authenticity vulnerability in Routine prior to versions 2.6.30.6 in Android Q(10), 3.1.21.10 in Android R(11) and 3.5.2.23 in Android S(12) allows local attacker to access protected files via unused code. • https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02 • CWE-345: Insufficient Verification of Data Authenticity •