6 results (0.005 seconds)

CVSS: 9.8EPSS: 0%CPEs: 12EXPL: 0

CVE-2016-11038

https://notcve.org/view.php?id=CVE-2016-11038

07 Apr 2020 — An issue was discovered on Samsung mobile devices with software through 2016-04-05 (incorporating the Samsung Professional Audio SDK). The Jack audio service doesn't implement access control for shared memory, leading to arbitrary code execution or privilege escalation. The Samsung ID is SVE-2016-5953 (July 2016). Se detectó un problema en dispositivos móviles Samsung con versiones de software hasta el 05-04-2019 (incorporando el Samsung Professional Audio SDK). El servicio de audio Jack no implementa el co... • https://security.samsungmobile.com/securityUpdate.smsb • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 1

CVE-2016-2036

https://notcve.org/view.php?id=CVE-2016-2036

13 Apr 2017 — The getURL function in drivers/secfilter/urlparser.c in secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to trigger a NULL pointer dereference via a "GET HTTP/1.1" request, aka SVE-2016-5036. La función getURL en drivers/secfilter/urlparser.c en secfilter en el kernel de Samsung para Android en SM-N9005 build N9005XXUGBOB6 (Note 3) y dispositivos G920FXXU2COH2 (Galaxy S6) de generación de SM-G920F permi... • https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0001 • CWE-476: NULL Pointer Dereference •

CVSS: 3.3EPSS: 0%CPEs: 4EXPL: 1

CVE-2016-2567

https://notcve.org/view.php?id=CVE-2016-2567

13 Apr 2017 — secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to bypass URL filtering by inserting an "exceptional URL" in the query string, as demonstrated by the http://should-have-been-filtered.example.com/?http://google.com URL. secfilter en el kernel de Samsung para Android en dispositivos SM-N9005 build N9005XXUGBOB6 (Note 3) y SM-G920F build G920FXXU2COH2 (Galaxy S6) permiten a los atacantes pasar por alto el... • https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2016-0003 • CWE-20: Improper Input Validation •

CVSS: 6.8EPSS: 0%CPEs: 10EXPL: 1

CVE-2016-4030

https://notcve.org/view.php?id=CVE-2016-4030

13 Apr 2017 — Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices have unintended availability of the modem in USB configuration number 2 within the secure lockscreen state, allowing an attacker to make phone calls, send text messages, or issue commands, aka SVE-2016-5301. Samsung en dispositivos SM-G920F build G920FXXU2COH2 (Galaxy... • http://www.securityfocus.com/bid/97701 • CWE-284: Improper Access Control •

CVSS: 6.8EPSS: 0%CPEs: 10EXPL: 1

CVE-2016-4031

https://notcve.org/view.php?id=CVE-2016-4031

13 Apr 2017 — Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices allow attackers to send AT commands by plugging the device into a Linux host, aka SVE-2016-5301. Samsung en los dispositivos SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 ... • http://www.securityfocus.com/bid/97703 • CWE-284: Improper Access Control •

CVSS: 4.6EPSS: 0%CPEs: 10EXPL: 1

CVE-2016-4032

https://notcve.org/view.php?id=CVE-2016-4032

13 Apr 2017 — Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices do not block AT+USBDEBUG and AT+WIFIVALUE, which allows attackers to modify Android settings by leveraging AT access, aka SVE-2016-5301. Samsung en los dispositivos SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build ... • http://www.securityfocus.com/bid/97650 • CWE-284: Improper Access Control •