Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-34606 State: PUBLISHED Published: 2024-08-07T01:29:55.815Z Last Updated: 2024-08-07T14:41:07.383Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in SmartThingsService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=08
CVE ID: CVE-2024-34607 State: PUBLISHED Published: 2024-08-07T01:29:56.983Z Last Updated: 2024-08-07T14:11:27.678Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in SamsungNotesService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=08
CVE ID: CVE-2024-34608 State: PUBLISHED Published: 2024-08-07T01:29:58.166Z Last Updated: 2024-08-07T13:25:11.128Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in PaymentManagerService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=08
CVE ID: CVE-2024-34609 State: PUBLISHED Published: 2024-08-07T01:29:59.364Z Last Updated: 2024-08-08T15:46:39.971Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in VoiceNoteService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=08
CVE ID: CVE-2024-34610 State: PUBLISHED Published: 2024-08-07T01:30:00.773Z Last Updated: 2024-08-07T13:34:08.945Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284 Improper Access Control Description: Improper access control in ExtControlDeviceService prior to SMR Aug-2024 Release 1 allows local attackers to access protected data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=08
CVE ID: CVE-2024-34611 State: PUBLISHED Published: 2024-08-07T01:30:01.974Z Last Updated: 2024-08-07T15:38:42.923Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in KnoxService prior to SMR Aug-2024 Release 1 allows local attackers to get sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=08
CVE ID: CVE-2024-34612 State: PUBLISHED Published: 2024-08-07T01:30:03.177Z Last Updated: 2024-08-07T13:59:34.466Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-122: Heap-based Buffer Overflow Description: Out-of-bound write in libcodec2secmp4vdec.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=08
CVE ID: CVE-2024-34613 State: PUBLISHED Published: 2024-08-07T01:30:04.358Z Last Updated: 2024-08-07T13:23:23.858Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in Galaxy Watch prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive information of Galaxy watch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=08
CVE ID: CVE-2024-34614 State: PUBLISHED Published: 2024-08-07T01:30:06.504Z Last Updated: 2024-08-08T15:46:10.672Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-122: Heap-based Buffer Overflow Description: Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=08
CVE ID: CVE-2024-34615 State: PUBLISHED Published: 2024-08-07T01:30:07.915Z Last Updated: 2024-08-07T13:19:53.089Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-122: Heap-based Buffer Overflow Description: Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to cause memory corruption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=08
CVE ID: CVE-2024-34616 State: PUBLISHED Published: 2024-08-07T01:30:09.263Z Last Updated: 2024-08-07T15:37:47.170Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-280: Improper Handling of Insufficient Permissions or Privileges Description: Improper handling of insufficient permission in KnoxDualDARPolicy prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=08
CVE ID: CVE-2024-34617 State: PUBLISHED Published: 2024-08-07T01:30:10.467Z Last Updated: 2024-08-07T13:44:32.242Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-280: Improper Handling of Insufficient Permissions or Privileges Description: Improper handling of insufficient permission in Telephony prior to SMR Aug-2024 Release 1 allows local attackers to configure default Message application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=08
CVE ID: CVE-2024-34618 State: PUBLISHED Published: 2024-08-07T01:30:11.642Z Last Updated: 2024-08-07T14:11:01.608Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in System property prior to SMR Aug-2024 Release 1 allows local attackers to access cell related information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=08
CVE ID: CVE-2024-34619 State: PUBLISHED Published: 2024-08-07T01:30:12.871Z Last Updated: 2024-08-07T14:18:40.597Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-1288: Improper Validation of Consistency within Input Description: Improper input validation in librtp.so prior to SMR Aug-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=08
CVE ID: CVE-2024-34620 State: PUBLISHED Published: 2024-08-07T01:30:14.071Z Last Updated: 2024-08-07T13:43:42.124Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-269: Improper Privilege Management Description: Improper privilege management in SumeNNService prior to SMR Aug-2024 Release 1 allows local attackers to start privileged service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=08
CVE ID: CVE-2024-34621 State: PUBLISHED Published: 2024-08-07T01:30:15.341Z Last Updated: 2024-08-08T15:44:48.504Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read in applying binary with data in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=08
CVE ID: CVE-2024-34622 State: PUBLISHED Published: 2024-08-07T01:30:17.202Z Last Updated: 2024-08-07T13:18:24.709Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-787: Out-of-bounds Write Description: Out-of-bounds write in appending paragraph in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially execute arbitrary code with Samsung Notes privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=08
CVE ID: CVE-2024-34623 State: PUBLISHED Published: 2024-08-07T01:30:18.397Z Last Updated: 2024-08-07T15:31:05.852Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-787: Out-of-bounds Write Description: Out-of-bounds write in applying connected information in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially execute arbitrary code with Samsung Notes privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=08
CVE ID: CVE-2024-34624 State: PUBLISHED Published: 2024-08-07T01:30:19.607Z Last Updated: 2024-08-07T13:28:00.696Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read in applying paragraphs in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=08
CVE ID: CVE-2024-34625 State: PUBLISHED Published: 2024-08-07T01:30:20.848Z Last Updated: 2024-08-07T14:09:20.229Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read in applying connection point in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=08
CVE ID: CVE-2024-34626 State: PUBLISHED Published: 2024-08-07T01:30:22.050Z Last Updated: 2024-08-07T14:08:58.100Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read in applying own binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=08
CVE ID: CVE-2024-34627 State: PUBLISHED Published: 2024-08-07T01:30:23.231Z Last Updated: 2024-08-07T13:20:31.414Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read in parsing implemention in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=08
CVE ID: CVE-2024-34628 State: PUBLISHED Published: 2024-08-07T01:30:24.472Z Last Updated: 2024-08-08T15:43:39.088Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read in applying binary with path in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=08
CVE ID: CVE-2024-34629 State: PUBLISHED Published: 2024-08-07T01:30:25.673Z Last Updated: 2024-08-07T13:11:05.704Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read in applying binary with text common object in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=08
CVE ID: CVE-2024-34630 State: PUBLISHED Published: 2024-08-07T01:30:26.850Z Last Updated: 2024-08-07T15:21:11.262Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read in applying own binary with textbox in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=08
CVE ID: CVE-2024-34631 State: PUBLISHED Published: 2024-08-07T01:30:28.070Z Last Updated: 2024-08-07T13:25:32.006Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read in applying new binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=08
CVE ID: CVE-2024-34632 State: PUBLISHED Published: 2024-08-07T01:30:29.271Z Last Updated: 2024-08-07T14:08:57.831Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read in uuid parsing in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=08
CVE ID: CVE-2024-34633 State: PUBLISHED Published: 2024-08-07T01:30:30.500Z Last Updated: 2024-08-07T14:08:27.897Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read in parsing object header in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=08
CVE ID: CVE-2024-34634 State: PUBLISHED Published: 2024-08-07T01:30:31.743Z Last Updated: 2024-08-07T13:18:59.837Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read in parsing connected object list in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=08
CVE ID: CVE-2024-34635 State: PUBLISHED Published: 2024-08-07T01:30:32.915Z Last Updated: 2024-08-07T17:33:43.726Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read in parsing textbox object in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=08
CVE ID: CVE-2024-34636 State: PUBLISHED Published: 2024-08-07T01:30:34.088Z Last Updated: 2024-08-08T15:43:08.903Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Email Problem Types: CWE-927: Use of Implicit Intent for Sensitive Communication Description: Use of implicit intent for sensitive communication in Samsung Email prior to version 6.1.94.2 allows local attackers to get sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=08
CVE ID: CVE-2024-34637 State: PUBLISHED Published: 2024-09-04T05:32:18.698Z Last Updated: 2024-09-04T13:14:00.164Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-863: Incorrect Authorization Description: Improper access control in WindowManagerService prior to SMR Sep-2024 Release 1 in Android 12, and SMR Jun-2024 Release 1 in Android 13 and Android 14 allows local attackers to bypass restrictions on starting services from the background. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE ID: CVE-2024-34638 State: PUBLISHED Published: 2024-09-04T05:32:19.926Z Last Updated: 2024-09-04T13:06:47.599Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-755: Improper Handling of Exceptional Conditions Description: Improper handling of exceptional conditions in ThemeCenter prior to SMR Sep-2024 Release 1 allows local attackers to delete non-preloaded applications. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE ID: CVE-2024-34639 State: PUBLISHED Published: 2024-09-04T05:32:21.329Z Last Updated: 2024-09-04T13:09:33.763Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-280: Improper Handling of Insufficient Permissions or Privileges Description: Improper handling of exceptional conditions in Setupwizard prior to SMR Aug-2024 Release 1 allows physical attackers to bypass proper validation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=08
CVE ID: CVE-2024-34640 State: PUBLISHED Published: 2024-09-04T05:32:23.079Z Last Updated: 2024-09-04T13:08:01.784Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control vulnerability in BGProtectManager prior to SMR Sep-2024 Release 1 allows local attackers to bypass restriction of process expiration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE ID: CVE-2024-34641 State: PUBLISHED Published: 2024-09-04T05:32:24.270Z Last Updated: 2024-09-04T13:10:24.678Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-926: Improper Export of Android Application Components Description: Improper Export of Android Application Components in FeliCaTest prior to SMR Sep-2024 Release 1 allows local attackers to enable NFC configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE ID: CVE-2024-34642 State: PUBLISHED Published: 2024-09-04T05:32:25.410Z Last Updated: 2024-09-04T13:10:48.637Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-285: Improper Authorization Description: Improper authorization in One UI Home prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE ID: CVE-2024-34643 State: PUBLISHED Published: 2024-09-04T05:32:26.535Z Last Updated: 2024-09-04T13:13:29.389Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284 Improper Access Control Description: Improper access control in key input related function in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to access protected data. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE ID: CVE-2024-34644 State: PUBLISHED Published: 2024-09-04T05:32:27.692Z Last Updated: 2024-09-04T13:18:59.249Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284 Improper Access Control Description: Improper access control in item selection related in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to access protected data. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE ID: CVE-2024-34645 State: PUBLISHED Published: 2024-09-04T05:32:28.878Z Last Updated: 2024-09-04T13:05:03.496Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Improper Input Validation Description: Improper input validation in ThemeCenter prior to SMR Sep-2024 Release 1 allows physical attackers to install privileged applications. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE ID: CVE-2024-34646 State: PUBLISHED Published: 2024-09-04T05:32:30.109Z Last Updated: 2024-09-04T13:16:17.115Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to cause local permanent denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09