Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
83, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8667, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8766R, MT8768, MT8771, MT8786, MT8788, MT8788E, MT8791, MT8791T, MT8792, MT8793, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893 Problem Types: CWE-122 Description: In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01672598; Issue ID: MSV-4622. Additional Analyst Notes: - CISA ADP Vulnrichmen
ot needed for exploitation. Patch ID: MOLY01672598; Issue ID: MSV-4622. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20727 State: PUBLISHED Published: 2025-11-04T06:19:40.087Z Last Updated: 2025-11-05T04:55:35.978Z Vendors: MediaTek, Inc. Products: MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6771, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8667, MT8673, MT8675, MT8676, MT8678, MT8765, M
83, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8667, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8766R, MT8768, MT8771, MT8786, MT8788, MT8788E, MT8791, MT8791T, MT8792, MT8793, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893 Problem Types: CWE-787 Description: In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01672601; Issue ID: MSV-4623. Additional Analyst Notes: - CISA ADP Vulnrichment:
needed for exploitation. Patch ID: MOLY01672601; Issue ID: MSV-4623. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20728 State: PUBLISHED Published: 2025-11-04T06:19:45.290Z Last Updated: 2025-11-05T04:55:39.588Z Vendors: MediaTek, Inc. Products: MT7902, MT7920, MT7921, MT7922, MT7925, MT7927 Problem Types: CWE-122 Description: In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00447115; Issue ID: MSV-4276. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20729 State: PUBLISHED Published: 2025-11-04T06:20:05.491Z Last Updated: 2025-11-05T04:55:48.589Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-122 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00441512; Issue ID: MSV-4153. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20730 State: PUBLISHED Published: 2025-11-04T06:19:47.152Z Last Updated: 2025-11-05T04:55:40.432Z Vendors: MediaTek, Inc. Products: MT2737, MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6990, MT6991, MT8188, MT8195, MT8676, MT8678, MT8696 Problem Types: CWE-287 Description: In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch
if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10068463; Issue ID: MSV-4141. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20731 State: PUBLISHED Published: 2025-11-04T06:20:07.276Z Last Updated: 2025-11-05T04:55:49.411Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-122 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege (when OceReducedNeighborReport is disabled). User interaction is not needed for exploitation. Patch ID: WCNCR00441511; Issue ID: MSV-4140. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-
: MSV-4140. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20732 State: PUBLISHED Published: 2025-11-04T06:20:08.954Z Last Updated: 2025-11-05T04:55:50.276Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-121 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege (when OceReducedNeighborReport is disabled). User interaction is not needed for exploitation. Patch ID: WCNCR00441510; Issue ID: MSV-4139. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-
: MSV-4139. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20733 State: PUBLISHED Published: 2025-11-04T06:19:49.117Z Last Updated: 2025-11-05T04:55:41.224Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-122 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00441509; Issue ID: MSV-4138. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20734 State: PUBLISHED Published: 2025-11-04T06:20:10.764Z Last Updated: 2025-11-05T04:55:51.084Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-122 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00441507; Issue ID: MSV-4112. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20735 State: PUBLISHED Published: 2025-11-04T06:19:50.999Z Last Updated: 2025-11-05T04:55:42.073Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-122 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435349; Issue ID: MSV-4051. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20736 State: PUBLISHED Published: 2025-11-04T06:20:12.530Z Last Updated: 2025-11-05T04:55:35.164Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-121 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00435347; Issue ID: MSV-4049. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20737 State: PUBLISHED Published: 2025-11-04T06:19:52.883Z Last Updated: 2025-11-05T04:55:42.993Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-121 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435343; Issue ID: MSV-4040. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20738 State: PUBLISHED Published: 2025-11-04T06:20:14.296Z Last Updated: 2025-11-05T04:55:34.374Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-121 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00435342; Issue ID: MSV-4039. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20739 State: PUBLISHED Published: 2025-11-04T06:20:16.025Z Last Updated: 2025-11-05T04:55:33.598Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-121 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00435340; Issue ID: MSV-4038. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20740 State: PUBLISHED Published: 2025-11-04T06:19:54.584Z Last Updated: 2025-11-04T15:04:25.506Z Vendors: MediaTek, Inc. Products: MT7902, MT7920, MT7921, MT7922, MT7925, MT7927 Problem Types: CWE-367 Description: In wlan STA driver, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435337; Issue ID: MSV-4036. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20741 State: PUBLISHED Published: 2025-11-04T06:20:21.366Z Last Updated: 2025-11-05T04:55:30.330Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-122 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00434422; Issue ID: MSV-3958. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20742 State: PUBLISHED Published: 2025-11-04T06:19:56.287Z Last Updated: 2025-11-05T04:55:43.910Z Vendors: MediaTek, Inc. Products: MT6890, MT7603, MT7615, MT7622, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-122 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00432680; Issue ID: MSV-3949. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20743 State: PUBLISHED Published: 2025-11-04T06:19:57.990Z Last Updated: 2025-11-05T04:55:44.828Z Vendors: MediaTek, Inc. Products: MT2718, MT6761, MT6765, MT6768, MT6781, MT6853, MT6877, MT6886, MT6893, MT6897, MT6899, MT6983, MT6989, MT6991, MT8113, MT8163, MT8168, MT8169, MT8183, MT8186, MT8188, MT8195, MT8196, MT8321, MT8365, MT8385, MT8390, MT8391, MT8512, MT8516, MT8519, MT8676, MT8678, MT8695, MT8696, MT8698, MT8755, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788E, MT8791T, MT8792, MT8793, MT8796, MT8797, MT8798, MT8873, MT8883, MT8893 Problem Types: CWE-416 Description: In clkdbg, there is a possible escalation of privilege due to use after free. This could l
m Types: CWE-416 Description: In clkdbg, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10136671; Issue ID: MSV-4651. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20744 State: PUBLISHED Published: 2025-11-04T06:19:59.710Z Last Updated: 2025-11-05T04:55:45.818Z Vendors: MediaTek, Inc. Products: MT6899, MT6991, MT8793 Problem Types: CWE-416 Description: In pda, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10127160; Issue ID: MSV-4542. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20745 State: PUBLISHED Published: 2025-11-04T06:20:03.095Z Last Updated: 2025-11-05T04:55:47.647Z Vendors: MediaTek, Inc. Products: MT2718, MT6989, MT6991, MT8370, MT8390, MT8395, MT8676, MT8678, MT87920 Problem Types: CWE-416 Description: In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10095441; Issue ID: MSV-4294. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20746 State: PUBLISHED Published: 2025-11-04T06:20:17.860Z Last Updated: 2025-11-05T04:55:32.792Z Vendors: MediaTek, Inc. Products: MT2718, MT2737, MT6835, MT6878, MT6886, MT6897, MT6899, MT6982, MT6985, MT6986, MT6986D, MT6989, MT6990, MT6991, MT8676, MT8678, MT8755, MT8893 Problem Types: CWE-121 Description: In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10010441; Issue ID: MSV-3967. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://c
. Patch ID: ALPS10010441; Issue ID: MSV-3967. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20747 State: PUBLISHED Published: 2025-11-04T06:20:19.607Z Last Updated: 2025-11-05T04:55:31.133Z Vendors: MediaTek, Inc. Products: MT2718, MT2737, MT6835, MT6878, MT6886, MT6897, MT6899, MT6982, MT6985, MT6986, MT6986D, MT6989, MT6990, MT6991, MT8676, MT8678, MT8755, MT8893 Problem Types: CWE-121 Description: In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10010443; Issue ID: MSV-3966. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://c
. Patch ID: ALPS10010443; Issue ID: MSV-3966. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20748 State: PUBLISHED Published: 2025-11-04T06:20:23.128Z Last Updated: 2025-11-05T04:55:29.380Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-120 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00432679; Issue ID: MSV-3950. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20749 State: PUBLISHED Published: 2025-11-04T06:20:51.979Z Last Updated: 2025-11-05T04:55:28.632Z Vendors: MediaTek, Inc. Products: MT6789, MT6835, MT6855, MT6878, MT6879, MT6886, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT8169, MT8188, MT8195, MT8196, MT8781, MT8796 Problem Types: CWE-121 Description: In charger, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09915493; Issue ID: MSV-3800. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.media
D: ALPS09915493; Issue ID: MSV-3800. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/November-2025
CVE ID: CVE-2025-20881 State: PUBLISHED Published: 2025-02-04T07:19:26.808Z Last Updated: 2025-02-04T15:42:43.548Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Out-of-bounds write in accessing buffer storing the decoded video frames in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=01
CVE ID: CVE-2025-20882 State: PUBLISHED Published: 2025-02-04T07:19:27.982Z Last Updated: 2025-02-04T15:42:18.918Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Out-of-bounds write in accessing uninitialized memory for svc1td in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=01
CVE ID: CVE-2025-20883 State: PUBLISHED Published: 2025-02-04T07:19:29.121Z Last Updated: 2025-02-04T16:34:44.258Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in SoundPicker prior to SMR Jan-2025 Release 1 allows physical attackers to access data across multiple user profiles. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=01
CVE ID: CVE-2025-20884 State: PUBLISHED Published: 2025-02-04T07:19:30.246Z Last Updated: 2025-02-04T16:30:49.024Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in Samsung Message prior to SMR Jan-2025 Release 1 allows physical attackers to access data across multiple user profiles. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=01
CVE ID: CVE-2025-20885 State: PUBLISHED Published: 2025-02-04T07:19:31.385Z Last Updated: 2025-03-25T05:36:40.747Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787: Out-of-bounds Write Description: Out-of-bounds write in softsim trustlet prior to SMR Jan-2025 Release 1 allows local privileged attackers to cause memory corruption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=01
CVE ID: CVE-2025-20886 State: PUBLISHED Published: 2025-02-04T07:19:32.626Z Last Updated: 2025-03-25T05:36:41.812Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-531: Inclusion of Sensitive Information in Test Code Description: Inclusion of sensitive information in test code in softsim trustlet prior to SMR Jan-2025 Release 1 allows local privileged attackers to get test key. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=01
CVE ID: CVE-2025-20887 State: PUBLISHED Published: 2025-02-04T07:19:33.828Z Last Updated: 2025-02-04T16:21:48.909Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-125 Out-of-bounds Read Description: Out-of-bounds read in accessing table used for svp8t in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitrary memory. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=01
CVE ID: CVE-2025-20888 State: PUBLISHED Published: 2025-02-04T07:19:35.006Z Last Updated: 2025-02-04T16:21:02.882Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Out-of-bounds write in handling the block size for smp4vtd in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=01