NotCVE - vendor:"Samsung" product:"Galaxy S7"

10 results (0.008 seconds)

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2019-15449

https://notcve.org/view.php?id=CVE-2019-15449

14 Nov 2019 — The Samsung S7 Edge Android device with a build fingerprint of samsung/hero2ltexx/hero2lte:8.0.0/R16NW/G935FXXS4ESC3:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000000, versionName=7.0.0.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other oth... • https://www.kryptowire.com/android-firmware-2019 •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2019-15448

https://notcve.org/view.php?id=CVE-2019-15448

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2019-15447

https://notcve.org/view.php?id=CVE-2019-15447

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2019-15446

https://notcve.org/view.php?id=CVE-2019-15446

14 Nov 2019 — The Samsung S7 Android device with a build fingerprint of samsung/heroltexx/herolte:8.0.0/R16NW/G930FXXU3ESAC:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000000, versionName=7.0.0.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-... • https://www.kryptowire.com/android-firmware-2019 •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2019-15445

https://notcve.org/view.php?id=CVE-2019-15445

14 Nov 2019 — The Samsung S7 Android device with a build fingerprint of samsung/heroltexx/herolte:8.0.0/R16NW/G930FXXS4ESC3:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app (versionCode=7000000, versionName=7.0.0.0) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-... • https://www.kryptowire.com/android-firmware-2019 •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2019-15444

https://notcve.org/view.php?id=CVE-2019-15444

CVSS: 7.8EPSS: 0%CPEs: 21EXPL: 0

CVE-2016-7988

https://notcve.org/view.php?id=CVE-2016-7988

31 Oct 2016 — On Samsung Galaxy S4 through S7 devices, absence of permissions on the BroadcastReceiver responsible for handling the com.[Samsung].android.intent.action.SET_WIFI intent leads to unsolicited configuration messages being handled by wifi-service.jar within the Android Framework, a subset of SVE-2016-6542. En dispositivos Samsung Galaxy S4 hasta la versión S7, la ausencia de permisos en el responsable BroadcastReceiver de manejar los intentos com.[Samsung].android.intent.action.SET_WIFI lleva a que los mensaje... • http://security.samsungmobile.com/smrupdate.html#SMR-AUG-2016 • CWE-275: Permission Issues CWE-388: 7PK - Errors •

CVSS: 7.8EPSS: 0%CPEs: 21EXPL: 0

CVE-2016-7989

https://notcve.org/view.php?id=CVE-2016-7989

31 Oct 2016 — On Samsung Galaxy S4 through S7 devices, a malformed OTA WAP PUSH SMS containing an OMACP message sent remotely triggers an unhandled ArrayIndexOutOfBoundsException in Samsung's implementation of the WifiServiceImpl class within wifi-service.jar. This causes the Android runtime to continually crash, rendering the device unusable until a factory reset is performed, a subset of SVE-2016-6542. En dispositivos Samsung Galaxy S4 hasta la versión S7, un OTA WAP PUSH SMS mal formado que contiene un mensaje enviado... • http://security.samsungmobile.com/smrupdate.html#SMR-AUG-2016 • CWE-254: 7PK - Security Features •

CVSS: 10.0EPSS: 1%CPEs: 21EXPL: 0

CVE-2016-7990

https://notcve.org/view.php?id=CVE-2016-7990

31 Oct 2016 — On Samsung Galaxy S4 through S7 devices, an integer overflow condition exists within libomacp.so when parsing OMACP messages (within WAP Push SMS messages) leading to a heap corruption that can result in Denial of Service and potentially remote code execution, a subset of SVE-2016-6542. En dispositivos Samsung Galaxy S4 hasta la versión S7, existe una condición de desbordamiento de entero dentro de libomacp.so al analizar mensajes OMACP (dentro de mensajes WAP Push SMS) que conducen a una corrupción de la p... • http://security.samsungmobile.com/smrupdate.html#SMR-AUG-2016 • CWE-190: Integer Overflow or Wraparound CWE-388: 7PK - Errors •

CVSS: 7.8EPSS: 0%CPEs: 21EXPL: 0

CVE-2016-7991

https://notcve.org/view.php?id=CVE-2016-7991

31 Oct 2016 — On Samsung Galaxy S4 through S7 devices, the "omacp" app ignores security information embedded in the OMACP messages resulting in remote unsolicited WAP Push SMS messages being accepted, parsed, and handled by the device, leading to unauthorized configuration changes, a subset of SVE-2016-6542. En dispositivos Samsung Galaxy S4 hasta la versión S7, la aplicación "omacp" ignora información de seguridad incrustada en los mensajes OMACP resultando en que mensajes WAP Push SMS remotos no solicitados son aceptad... • http://security.samsungmobile.com/smrupdate.html#SMR-AUG-2016 • CWE-388: 7PK - Errors •