CVSS: 9.8EPSS: 0%CPEs: 5EXPL: 0CVE-2020-11873
https://notcve.org/view.php?id=CVE-2020-11873
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A stack-based buffer overflow in the logging tool could allow an attacker to gain privileges. The LG ID is LVE-SMP-200005 (April 2020). Se descubrió un problema en los dispositivos móviles de LG con el software del Sistema Operativo Android versiones 7.2, 8.0, 8.1, 9 y 10. Un desbordamiento del búfer en la región stack de la memoria en la herramienta de registro podría permitir a un atacante alcanzar privilegios. • https://lgsecurity.lge.com • CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 0CVE-2019-20771
https://notcve.org/view.php?id=CVE-2019-20771
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. WapService allows unconfirmed configuration changes via a modified OMACP message. The LG ID is LVE-SMP-190006 (August 2019). Se descubrió un problema en los dispositivos móviles LG con el software del Sistema Operativo Android versiones 7.0, 7.1, 7.2, 8.0, 8.1 y 9.0. WapService permite cambios de configuración no confirmados por medio de un mensaje OMACP modificado. • https://lgsecurity.lge.com •
CVSS: 5.8EPSS: 0%CPEs: 1EXPL: 0CVE-2015-9546
https://notcve.org/view.php?id=CVE-2015-9546
An issue was discovered on Samsung mobile devices with KK(4.4) and later software through 2015-06-16. In some cases, HTTP is used for an Inputmethod, rather than HTTPS. A man-in-the-middle attacker can modify the client-server data stream to insert directory traversal sequences into an extracted file path. The Samsung ID is SVE-2015-4363 (November 2015). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4) y posteriores hasta el 16-06-2015. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2015-9547
https://notcve.org/view.php?id=CVE-2015-9547
An issue was discovered on Samsung mobile devices with JBP(4.3) and KK(4.4.2) software. Because the READ_LOGS permission is mishandled, sensitive information is disclosed in a world-readable copy of the log file if the error message is "Unhandled exception in Dalvik VM," "Application not responding ANR event," or "Crash on an application's native code." The Samsung ID is SVE-2015-2885 (October 2015). Se detectó un problema en dispositivos móviles Samsung con versiones de software JBP(4.3) y KK(4.4.2). Debido a que el permiso READ_LOGS se maneja inapropiadamente, la información confidencial es divulgada en una copia de tipo world-readable del archivo de registro si el mensaje de error es "Unhandled exception in Dalvik VM," "Application not responding ANR event," o "Crash on an application's native code." • https://security.samsungmobile.com/securityUpdate.smsb • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2015-5524
https://notcve.org/view.php?id=CVE-2015-5524
An issue was discovered on Samsung mobile devices with KK(4.4) and later software through 2015-05-13. There is a buffer overflow in datablock_write because the amount of received data is not validated. The Samsung ID is SVE-2015-4018 (December 2015). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4) y posteriores hasta 13-05-2015. Se presenta un desbordamiento del búfer en datablock_write porque la cantidad de datos recibidos no es validada. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •