Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-42524 State: PUBLISHED Published: 2023-09-18T00:00:00 Last Updated: 2024-09-25T15:50:25.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1. Additional Analyst Notes: - CVE Program Container: -
n 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.withsecure.com/en/support/security-advisories
CVE ID: CVE-2023-42525 State: PUBLISHED Published: 2023-09-18T00:00:00 Last Updated: 2024-09-25T15:49:52.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1. Additional Analyst Notes: - CVE Program Container: -
CVE ID: CVE-2023-42526 State: PUBLISHED Published: 2023-09-18T00:00:00 Last Updated: 2024-09-25T15:49:21.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain WithSecure products allow a remote crash of a scanning engine via decompression of crafted data files. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1. Additional Analyst Notes: - CVE Program Co
x Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.withsecure.com/en/support/security-advisories
CVE ID: CVE-2023-42527 State: PUBLISHED Published: 2023-11-07T07:49:25.565Z Last Updated: 2024-09-04T18:52:24.593Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20: Improper Input Validation Description: Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to expose sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=11
CVE ID: CVE-2023-42528 State: PUBLISHED Published: 2023-11-07T07:49:26.539Z Last Updated: 2024-09-04T20:25:21.055Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20: Improper Input Validation Description: Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=11
CVE ID: CVE-2023-42529 State: PUBLISHED Published: 2023-11-07T07:49:27.494Z Last Updated: 2024-09-04T20:24:43.387Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787: Out-of-bounds Write Description: Out-of-bound write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=11
CVE ID: CVE-2023-42530 State: PUBLISHED Published: 2023-11-07T07:49:28.469Z Last Updated: 2024-09-04T20:23:56.956Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Improper Input Validation Description: Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct without User Interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=11
CVE ID: CVE-2023-42531 State: PUBLISHED Published: 2023-11-07T07:49:29.442Z Last Updated: 2025-06-12T14:15:55.130Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284 Improper Access Control Description: Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass restrictions on starting activities from the background. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=11
CVE ID: CVE-2023-42532 State: PUBLISHED Published: 2023-11-07T07:49:30.416Z Last Updated: 2024-09-04T18:52:04.119Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-295: Improper Certificate Validation Description: Improper Certificate Validation in FotaAgent prior to SMR Nov-2023 Release1 allows remote attacker to intercept the network traffic including Firmware information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=11
CVE ID: CVE-2023-42533 State: PUBLISHED Published: 2023-11-07T07:49:31.422Z Last Updated: 2024-09-04T20:23:20.725Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Improper Input Validation Description: Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execute arbitrary code in Kernel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=11
CVE ID: CVE-2023-42534 State: PUBLISHED Published: 2023-11-07T07:49:32.416Z Last Updated: 2024-09-04T18:51:47.533Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Improper Input Validation Description: Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to read arbitrary files with system privilege. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=11
CVE ID: CVE-2023-42535 State: PUBLISHED Published: 2023-11-07T07:49:33.371Z Last Updated: 2024-09-04T20:22:26.979Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow) Description: Out-of-bounds Write in read_block of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=11
CVE ID: CVE-2023-42536 State: PUBLISHED Published: 2023-11-07T07:49:34.499Z Last Updated: 2025-06-11T14:36:37.488Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: An improper input validation in saped_dec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=11
CVE ID: CVE-2023-42537 State: PUBLISHED Published: 2023-11-07T07:49:35.517Z Last Updated: 2024-09-17T13:06:59.830Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=11
CVE ID: CVE-2023-42538 State: PUBLISHED Published: 2023-11-07T07:49:36.535Z Last Updated: 2024-08-02T19:23:40.054Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: An improper input validation in saped_rec_silence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=11
CVE ID: CVE-2023-42539 State: PUBLISHED Published: 2023-11-07T07:49:37.521Z Last Updated: 2024-09-17T13:33:59.505Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Health Problem Types: CWE-284: Improper Access Control Description: PendingIntent hijacking vulnerability in ChallengeNotificationManager in Samsung Health prior to version 6.25 allows local attackers to access data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11
CVE ID: CVE-2023-42540 State: PUBLISHED Published: 2023-11-07T07:49:38.507Z Last Updated: 2025-03-06T15:31:58.148Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Account Problem Types: CWE-284 Improper Access Control Description: Improper access control vulnerability in Samsung Account prior to version 14.5.01.1 allows attackers to access sensitive information via implicit intent. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11
CVE ID: CVE-2023-42541 State: PUBLISHED Published: 2023-11-07T07:49:39.483Z Last Updated: 2025-03-06T15:31:33.706Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Push Service Problem Types: CWE-285: Improper Authorization Description: Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11
CVE ID: CVE-2023-42542 State: PUBLISHED Published: 2023-11-07T07:49:40.453Z Last Updated: 2025-03-06T15:31:15.713Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Push Service Problem Types: CWE-284: Improper Access Control Description: Improper access control vulnerability in Samsung Push Service prior to 3.4.10 allows local attackers to get register ID to identify the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11
CVE ID: CVE-2023-42543 State: PUBLISHED Published: 2023-11-07T07:49:41.445Z Last Updated: 2024-09-17T13:33:35.052Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Bixby Voice Problem Types: CWE-925 : Improper Verification of Intent by Broadcast Receiver Description: Improper verification of intent by broadcast receiver vulnerability in Bixby Voice prior to version 3.3.35.12 allows attackers to access arbitrary data with Bixby Voice privilege. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11
CVE ID: CVE-2023-42544 State: PUBLISHED Published: 2023-11-07T07:49:42.414Z Last Updated: 2024-09-17T13:33:01.037Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Quick Share Problem Types: CWE-284: Improper Access Control Description: Improper access control vulnerability in Quick Share prior to 13.5.52.0 allows local attacker to access local files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11
CVE ID: CVE-2023-42545 State: PUBLISHED Published: 2023-11-07T07:49:43.966Z Last Updated: 2024-09-17T13:32:33.996Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Phone Problem Types: CWE-927 : Use of Implicit Intent for Sensitive Communication Description: Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and 14.7.38 in Android 13 allows attackers to access location data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11
CVE ID: CVE-2023-42546 State: PUBLISHED Published: 2023-11-07T07:49:44.951Z Last Updated: 2024-09-17T13:31:55.124Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Account Problem Types: CWE-927 : Use of Implicit Intent for Sensitive Communication Description: Use of implicit intent for sensitive communication vulnerability in startAgreeToDisclaimerActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&mon
ogram Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11
CVE ID: CVE-2023-42547 State: PUBLISHED Published: 2023-11-07T07:49:46.204Z Last Updated: 2024-09-12T19:16:18.225Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Account Problem Types: CWE-927 : Use of Implicit Intent for Sensitive Communication Description: Use of implicit intent for sensitive communication vulnerability in startEmailValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month
ram Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11
CVE ID: CVE-2023-42548 State: PUBLISHED Published: 2023-11-07T07:49:47.191Z Last Updated: 2025-06-11T14:35:09.389Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Account Problem Types: CWE-927 : Use of Implicit Intent for Sensitive Communication Description: Use of implicit intent for sensitive communication vulnerability in startMandatoryCheckActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=
am Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11
CVE ID: CVE-2023-42549 State: PUBLISHED Published: 2023-11-07T07:49:48.167Z Last Updated: 2024-09-12T19:15:44.491Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Account Problem Types: CWE-927 : Use of Implicit Intent for Sensitive Communication Description: Use of implicit intent for sensitive communication vulnerability in startNameValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=
CVE ID: CVE-2023-42550 State: PUBLISHED Published: 2023-11-07T07:49:49.126Z Last Updated: 2024-09-12T19:15:18.640Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Account Problem Types: CWE-927 : Use of Implicit Intent for Sensitive Communication Description: Use of implicit intent for sensitive communication vulnerability in startSignIn in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11
CVE ID: CVE-2023-42551 State: PUBLISHED Published: 2023-11-07T07:49:50.113Z Last Updated: 2024-09-12T19:14:55.060Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Account Problem Types: CWE-927 : Use of Implicit Intent for Sensitive Communication Description: Use of implicit intent for sensitive communication vulnerability in startTncActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11
CVE ID: CVE-2023-42552 State: PUBLISHED Published: 2023-11-07T07:49:51.107Z Last Updated: 2024-09-12T19:14:13.915Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Firewall Problem Types: CWE-927 : Use of Implicit Intent for Sensitive Communication Description: Implicit intent hijacking vulnerability in Firewall application prior to versions 12.1.00.24 in Android 11, 13.1.00.16 in Android 12 and 14.1.00.7 in Android 13 allows 3rd party application to tamper the database of Firewall. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&mon
CVE ID: CVE-2023-42553 State: PUBLISHED Published: 2023-11-07T07:49:52.365Z Last Updated: 2025-03-06T15:30:26.309Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Email Problem Types: CWE-863 Incorrect Authorization Description: Improper authorization verification vulnerability in Samsung Email prior to version 6.1.90.4 allows attackers to read sandbox data of email. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11
CVE ID: CVE-2023-42554 State: PUBLISHED Published: 2023-11-07T07:49:53.338Z Last Updated: 2025-03-06T15:29:42.672Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Pass Problem Types: CWE-287: Improper Authentication Description: Improper Authentication vulnerabiity in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11
CVE ID: CVE-2023-42555 State: PUBLISHED Published: 2023-11-07T07:49:54.314Z Last Updated: 2024-08-02T19:23:39.597Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N) Vendors: Samsung Mobile Products: EasySetup Problem Types: CWE-927 : Use of Implicit Intent for Sensitive Communication Description: Use of implicit intent for sensitive communication vulnerability in EasySetup prior to version 11.1.13 allows attackers to get the bluetooth address of user device. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11
CVE ID: CVE-2023-42556 State: PUBLISHED Published: 2023-12-05T02:44:14.014Z Last Updated: 2024-08-02T19:23:40.157Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-927 : Use of Implicit Intent for Sensitive Communication Description: Improper usage of implicit intent in Contacts prior to SMR Dec-2023 Release 1 allows attacker to get sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE ID: CVE-2023-42557 State: PUBLISHED Published: 2023-12-05T02:44:15.121Z Last Updated: 2024-08-02T19:23:39.768Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Out-of-bound write vulnerability in libIfaaCa prior to SMR Dec-2023 Release 1 allows local system attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE ID: CVE-2023-42558 State: PUBLISHED Published: 2023-12-05T02:44:16.111Z Last Updated: 2024-12-02T17:25:49.087Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Out of bounds write vulnerability in HDCP in HAL prior to SMR Dec-2023 Release 1 allows attacker to perform code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE ID: CVE-2023-42559 State: PUBLISHED Published: 2023-12-05T02:44:17.066Z Last Updated: 2024-08-02T19:23:39.612Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-754 Improper Check for Unusual or Exceptional Conditions Description: Improper exception management vulnerability in Knox Guard prior to SMR Dec-2023 Release 1 allows Knox Guard lock bypass via changing system time. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE ID: CVE-2023-42560 State: PUBLISHED Published: 2023-12-05T02:44:18.157Z Last Updated: 2024-08-02T19:23:39.683Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787: Out-of-bounds Write Description: Heap out-of-bounds write vulnerability in dec_mono_audb of libsavsac.so prior to SMR Dec-2023 Release 1 allows an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12