Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-20841 State: PUBLISHED Published: 2024-03-05T04:44:50.761Z Last Updated: 2024-08-01T22:06:36.487Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samnsung Account Problem Types: CWE-280: Improper Handling of Insufficient Permissions or Privileges Description: Improper Handling of Insufficient Privileges in Samsung Account prior to version 14.8.00.3 allows local attackers to access data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=03
CVE ID: CVE-2024-20842 State: PUBLISHED Published: 2024-04-02T02:59:37.296Z Last Updated: 2025-03-12T16:39:05.013Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Improper Input Validation vulnerability in handling apdu of libsec-ril prior to SMR Apr-2024 Release 1 allows local privileged attackers to write out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=04
CVE ID: CVE-2024-20843 State: PUBLISHED Published: 2024-04-02T02:59:38.625Z Last Updated: 2024-08-01T22:06:36.496Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Out-of-bound write vulnerability in command parsing implementation of libIfaaCa prior to SMR Apr-2024 Release 1 allows local privileged attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=04
CVE ID: CVE-2024-20844 State: PUBLISHED Published: 2024-04-02T02:59:39.681Z Last Updated: 2024-08-01T22:06:37.185Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787: Out-of-bounds Write Description: Out-of-bounds write vulnerability while parsing remaining codewords in libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=04
CVE ID: CVE-2024-20845 State: PUBLISHED Published: 2024-04-02T02:59:40.999Z Last Updated: 2024-08-22T19:50:58.762Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787: Out-of-bounds Write Description: Out-of-bounds write vulnerability while releasing memory in libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=04
CVE ID: CVE-2024-20846 State: PUBLISHED Published: 2024-04-02T02:59:42.048Z Last Updated: 2024-08-01T22:06:36.684Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787: Out-of-bounds Write Description: Out-of-bounds write vulnerability while decoding hcr of libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=04
CVE ID: CVE-2024-20847 State: PUBLISHED Published: 2024-04-02T02:59:43.122Z Last Updated: 2024-08-01T22:06:36.772Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-863 Incorrect Authorization Description: Improper Access Control vulnerability in StorageManagerService prior to SMR Apr-2024 Release 1 allows local attackers to read sdcard information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=04
CVE ID: CVE-2024-20848 State: PUBLISHED Published: 2024-04-02T02:59:44.191Z Last Updated: 2024-08-23T18:51:08.247Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Improper Input Validation vulnerability in text parsing implementation of libsdffextractor prior to SMR Apr-2024 Release 1 allows local attackers to write out-of-bounds memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=04
CVE ID: CVE-2024-20849 State: PUBLISHED Published: 2024-04-02T02:59:45.272Z Last Updated: 2024-08-27T15:07:06.996Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Out-of-bound Write vulnerability in chunk parsing implementation of libsdffextractor prior to SMR Apr-2023 Release 1 allows local attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=04
CVE ID: CVE-2024-20850 State: PUBLISHED Published: 2024-04-02T02:59:46.372Z Last Updated: 2024-08-01T22:06:36.963Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Pay Problem Types: CWE-927: Use of Implicit Intent for Sensitive Communication Description: Use of Implicit Intent for Sensitive Communication in Samsung Pay prior to version 5.4.99 allows local attackers to access information of Samsung Pay. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=04
CVE ID: CVE-2024-20851 State: PUBLISHED Published: 2024-04-02T02:59:47.450Z Last Updated: 2024-08-01T22:06:37.166Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Data Store Problem Types: CWE-284: Improper Access Control Description: Improper access control vulnerability in Samsung Data Store prior to version 5.3.00.4 allows local attackers to launch arbitrary activity with Samsung Data Store privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=04
CVE ID: CVE-2024-20852 State: PUBLISHED Published: 2024-04-02T02:59:48.487Z Last Updated: 2024-08-01T22:06:36.637Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: SmartThings Problem Types: CWE-925 : Improper Verification of Intent by Broadcast Receiver Description: Improper verification of intent by broadcast receiver vulnerability in SmartThings prior to version 1.8.13.22 allows local attackers to access testing configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=04
CVE ID: CVE-2024-20853 State: PUBLISHED Published: 2024-04-02T02:59:49.505Z Last Updated: 2025-08-26T20:08:10.496Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: ThemeStore Problem Types: CWE-925 : Improper Verification of Intent by Broadcast Receiver Description: Improper verification of intent by broadcast receiver vulnerability in ThemeStore prior to 5.3.05.2 allows local attackers to write arbitrary files to sandbox of ThemeStore. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=04
CVE ID: CVE-2024-20854 State: PUBLISHED Published: 2024-04-02T02:59:50.530Z Last Updated: 2024-08-01T22:06:36.824Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Camera Problem Types: CWE-280: Improper Handling of Insufficient Permissions or Privileges Description: Improper handling of insufficient privileges vulnerability in Samsung Camera prior to versions 12.1.0.31 in Android 12, 13.1.02.07 in Android 13, and 14.0.01.06 in Android 14 allows local attackers to access image data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=
- CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=04
CVE ID: CVE-2024-20855 State: PUBLISHED Published: 2024-05-07T04:32:58.301Z Last Updated: 2024-08-01T22:06:37.066Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284 Improper Access Control Description: Improper access control vulnerability in multitasking framework prior to SMR May-2024 Release 1 allows physical attackers to access unlocked screen for a while. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=05
CVE ID: CVE-2024-20856 State: PUBLISHED Published: 2024-05-07T04:28:40.165Z Last Updated: 2024-08-01T22:06:36.826Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-287 improper authentication Description: Improper Authentication vulnerability in Secure Folder prior to SMR May-2024 Release 1 allows physical attackers to access Secure Folder without proper authentication in a specific scenario. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=05
CVE ID: CVE-2024-20857 State: PUBLISHED Published: 2024-05-07T04:28:41.315Z Last Updated: 2024-08-01T22:06:37.165Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control vulnerability in startListening of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to access information of current application. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=05
CVE ID: CVE-2024-20858 State: PUBLISHED Published: 2024-05-07T04:28:42.606Z Last Updated: 2024-08-01T22:06:36.720Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control vulnerability in setCocktailHostCallbacks of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to access information of current application. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=05
CVE ID: CVE-2024-20859 State: PUBLISHED Published: 2024-05-07T04:28:43.841Z Last Updated: 2024-08-01T22:06:36.980Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-862 Missing Authorization Description: Improper access control vulnerability in FactoryCamera prior to SMR May-2024 Release 1 allows local attackers to take pictures without privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=05
CVE ID: CVE-2024-20860 State: PUBLISHED Published: 2024-05-07T04:28:45.117Z Last Updated: 2024-08-01T22:06:36.685Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-926: Improper Export of Android Application Components Description: Improper export of android application components vulnerability in TelephonyUI prior to SMR May-2024 Release 1 allows local attackers to reboot the device without proper permission. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=05
CVE ID: CVE-2024-20861 State: PUBLISHED Published: 2024-05-07T04:28:46.317Z Last Updated: 2024-08-01T22:06:37.111Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-416 Use After Free Description: Use after free vulnerability in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to cause memory corruption. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=05
CVE ID: CVE-2024-20862 State: PUBLISHED Published: 2024-05-07T04:28:47.780Z Last Updated: 2024-08-01T22:06:36.558Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Out-of-bounds write in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=05
CVE ID: CVE-2024-20863 State: PUBLISHED Published: 2024-05-07T04:28:48.932Z Last Updated: 2024-08-01T22:06:37.084Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Out of bounds write vulnerability in SNAP in HAL prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=05
CVE ID: CVE-2024-20864 State: PUBLISHED Published: 2024-05-07T04:28:50.999Z Last Updated: 2024-08-01T22:06:36.800Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control vulnerability in DarManagerService prior to SMR May-2024 Release 1 allows local attackers to monitor system resources. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=05
CVE ID: CVE-2024-20865 State: PUBLISHED Published: 2024-05-07T04:28:52.434Z Last Updated: 2024-08-01T22:06:36.685Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-287: Improper Authentication Description: Authentication bypass in bootloader prior to SMR May-2024 Release 1 allows physical attackers to flash arbitrary images. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=05
CVE ID: CVE-2024-20866 State: PUBLISHED Published: 2024-05-07T04:28:53.604Z Last Updated: 2024-08-01T22:06:36.764Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-285: Improper Authorization Description: Authentication bypass vulnerability in Setupwizard prior to SMR May-2024 Release 1 allows physical attackers to skip activation step. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=05
CVE ID: CVE-2024-20867 State: PUBLISHED Published: 2024-05-07T04:28:55.132Z Last Updated: 2024-08-01T22:06:37.167Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Email Problem Types: CWE-269: Improper Privilege Management Description: Improper privilege management vulnerability in Samsung Email prior to version 6.1.91.14 allows local attackers to access sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=05
CVE ID: CVE-2024-20868 State: PUBLISHED Published: 2024-05-07T04:28:56.248Z Last Updated: 2024-08-01T22:06:36.886Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-20: Improper Input Validation Description: Improper input validation in Samsung Notes prior to version 4.4.15 allows local attackers to delete files with Samsung Notes privilege under certain conditions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=05
CVE ID: CVE-2024-20869 State: PUBLISHED Published: 2024-05-07T04:28:57.359Z Last Updated: 2024-08-01T22:06:36.821Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Internet Problem Types: CWE-269: Improper Privilege Management Description: Improper privilege management vulnerability in Samsung Internet prior to version 25.0.0.41 allows local attackers to bypass protection for cookies. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=05
CVE ID: CVE-2024-20870 State: PUBLISHED Published: 2024-05-07T04:28:58.507Z Last Updated: 2024-08-01T22:06:36.617Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Galaxy Store Problem Types: CWE-925 : Improper Verification of Intent by Broadcast Receiver Description: Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.71.8 allows local attackers to write arbitrary files with the privilege of Galaxy Store. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=05
CVE ID: CVE-2024-20871 State: PUBLISHED Published: 2024-05-07T04:28:59.636Z Last Updated: 2024-08-01T22:06:36.910Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L) Vendors: Samsung Mobile Products: Samsung Keyboard Problem Types: CWE-285: Improper Authorization Description: Improper authorization vulnerability in Samsung Keyboard prior to version One UI 5.1.1 allows physical attackers to partially bypass the factory reset protection. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=05
CVE ID: CVE-2024-20872 State: PUBLISHED Published: 2024-05-07T04:29:00.789Z Last Updated: 2024-08-01T22:06:36.687Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Samsung Mobile Products: TalkbackSE Problem Types: CWE-280: Improper Handling of Insufficient Permissions or Privileges Description: Improper handling of insufficient privileges vulnerability in TalkbackSE prior to version Android 14 allows local attackers to modify setting value of TalkbackSE. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=05
CVE ID: CVE-2024-20873 State: PUBLISHED Published: 2024-06-04T06:42:20.135Z Last Updated: 2024-08-01T22:06:37.276Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Improper input validation vulnerability in caminfo driver prior to SMR Jun-2024 Release 1 allows local privileged attackers to write out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=06
CVE ID: CVE-2024-20874 State: PUBLISHED Published: 2024-06-04T06:42:21.299Z Last Updated: 2024-08-01T22:06:36.940Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control vulnerability in SmartManagerCN prior to SMR Jun-2024 Release 1 allows local attackers to launch privileged activities. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=06
CVE ID: CVE-2024-20875 State: PUBLISHED Published: 2024-06-04T06:42:22.497Z Last Updated: 2024-08-01T22:06:37.110Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-287 Improper Authentication Description: Improper caller verification vulnerability in SemClipboard prior to SMR June-2024 Release 1 allows local attackers to access arbitrary files. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=06
CVE ID: CVE-2024-20876 State: PUBLISHED Published: 2024-06-04T06:42:23.663Z Last Updated: 2024-08-01T22:06:37.084Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20: Improper Input Validation Description: Improper input validation in libsheifdecadapter.so prior to SMR Jun-2024 Release 1 allows local attackers to lead to memory corruption. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=06
CVE ID: CVE-2024-20877 State: PUBLISHED Published: 2024-06-04T06:42:24.841Z Last Updated: 2024-08-01T22:06:36.913Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-122: Heap-based Buffer Overflow Description: Heap out-of-bound write vulnerability in parsing grid image header in libsavscmn.so prior to SMR Jun-2024 Release 1 allows local attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=06
CVE ID: CVE-2024-20878 State: PUBLISHED Published: 2024-06-04T06:42:26.067Z Last Updated: 2024-08-01T22:06:36.637Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-122: Heap-based Buffer Overflow Description: Heap out-of-bound write vulnerability in parsing grid image in libsavscmn.so prior to SMR June-2024 Release 1 allows local attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=06