Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-20804 State: PUBLISHED Published: 2024-01-04T01:10:12.815Z Last Updated: 2025-04-17T18:22:36.814Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory (&#39;Path Traversal&#39;) Description: Path traversal vulnerability in FileUriConverter of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrary file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/sec
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=01
CVE ID: CVE-2024-20805 State: PUBLISHED Published: 2024-01-04T01:10:13.838Z Last Updated: 2025-06-03T14:42:52.558Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory (&#39;Path Traversal&#39;) Description: Path traversal vulnerability in ZipCompressor of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrary file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securit
nalyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=01
CVE ID: CVE-2024-20806 State: PUBLISHED Published: 2024-01-04T01:10:14.875Z Last Updated: 2025-06-17T20:29:11.598Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in Notification service prior to SMR Jan-2024 Release 1 allows local attacker to access notification data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=01
CVE ID: CVE-2024-20807 State: PUBLISHED Published: 2024-01-04T01:10:15.985Z Last Updated: 2024-11-14T18:23:21.141Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Email Problem Types: CWE-927 : Use of Implicit Intent for Sensitive Communication Description: Implicit intent hijacking vulnerability in Samsung Email prior to version 6.1.90.16 allows local attacker to get sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=01
CVE ID: CVE-2024-20808 State: PUBLISHED Published: 2024-01-04T01:10:17.076Z Last Updated: 2025-06-17T20:29:11.719Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Samsung Mobile Products: Nearby device scanning Problem Types: CWE-926 : Improper Export of Android Application Components Description: Improper access control vulnerability in Nearby device scanning prior version 11.1.14.7 allows local attacker to access data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=01
CVE ID: CVE-2024-20809 State: PUBLISHED Published: 2024-01-04T01:10:18.092Z Last Updated: 2025-06-17T20:29:11.856Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Samsung Mobile Products: Nearby device scanning Problem Types: CWE-926 : Improper Export of Android Application Components Description: Improper access control vulnerability in Nearby device scanning prior version 11.1.14.7 allows local attacker to access data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=01
CVE ID: CVE-2024-20810 State: PUBLISHED Published: 2024-02-06T02:23:00.267Z Last Updated: 2025-04-24T15:50:21.288Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-927: Use of Implicit Intent for Sensitive Communication Description: Implicit intent hijacking vulnerability in Smart Suggestions prior to SMR Feb-2024 Release 1 allows local attackers to get sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=02
CVE ID: CVE-2024-20811 State: PUBLISHED Published: 2024-02-06T02:23:01.334Z Last Updated: 2024-08-01T22:06:36.199Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-289: Authentication Bypass by Alternate Name Description: Improper caller verification in GameOptimizer prior to SMR Feb-2024 Release 1 allows local attackers to configure GameOptimizer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=02
CVE ID: CVE-2024-20812 State: PUBLISHED Published: 2024-02-06T02:23:02.443Z Last Updated: 2025-05-15T19:45:29.937Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow) Description: Out-of-bounds Write in padmd_vld_htbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=02
CVE ID: CVE-2024-20813 State: PUBLISHED Published: 2024-02-06T02:23:04.035Z Last Updated: 2025-05-15T19:45:24.333Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow) Description: Out-of-bounds Write in padmd_vld_qtbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=02
CVE ID: CVE-2024-20814 State: PUBLISHED Published: 2024-02-06T02:23:05.047Z Last Updated: 2024-08-01T22:06:36.415Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds Read in padmd_vld_ac_prog_refine of libpadm.so prior to SMR Feb-2024 Release 1 allows local attackers access unauthorized information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=02
CVE ID: CVE-2024-20815 State: PUBLISHED Published: 2024-02-06T02:23:06.078Z Last Updated: 2024-08-19T20:14:10.120Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-287: Improper Authentication Description: Improper authentication vulnerability in onCharacteristicReadRequest in Auto Hotspot prior to SMR Feb-2024 Release 1 allows adjacent attackers connect to victim&#39;s mobile hotspot without user awareness. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=02
CVE ID: CVE-2024-20816 State: PUBLISHED Published: 2024-02-06T02:23:07.131Z Last Updated: 2024-11-07T21:05:34.499Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-287: Improper Authentication Description: Improper authentication vulnerability in onCharacteristicWriteRequest in Auto Hotspot prior to SMR Feb-2024 Release 1 allows adjacent attackers connect to victim&#39;s mobile hotspot without user awareness. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=02
CVE ID: CVE-2024-20817 State: PUBLISHED Published: 2024-02-06T02:23:08.182Z Last Updated: 2025-05-08T18:56:41.662Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787: Out-of-bounds Write Description: Out-of-bounds Write vulnerabilities in svc1td_vld_slh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=02
CVE ID: CVE-2024-20818 State: PUBLISHED Published: 2024-02-06T02:23:09.202Z Last Updated: 2025-06-17T21:29:27.895Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787: Out-of-bounds Write Description: Out-of-bounds Write vulnerabilities in svc1td_vld_elh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=02
CVE ID: CVE-2024-20819 State: PUBLISHED Published: 2024-02-06T02:23:10.229Z Last Updated: 2025-06-17T21:29:28.070Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787: Out-of-bounds Write Description: Out-of-bounds Write vulnerabilities in svc1td_vld_plh_ap of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=02
CVE ID: CVE-2024-20820 State: PUBLISHED Published: 2024-02-06T02:23:11.452Z Last Updated: 2024-08-01T22:06:36.246Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20: Improper Input Validation Description: Improper input validation in bootloader prior to SMR Feb-2024 Release 1 allows local privileged attackers to cause an Out-Of-Bounds read. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=02
CVE ID: CVE-2024-20821 State: PUBLISHED Published: 2024-05-07T04:25:21.354Z Last Updated: 2024-08-01T22:06:36.234Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-1326: Missing Immutable Root of Trust in Hardware Description: A vulnerability possible to reconfigure OTP allows local attackers to transit RMA(Return Merchandise Authorization) mode, which disables security features. This attack needs additional privilege to control TEE. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=05
CVE ID: CVE-2024-20822 State: PUBLISHED Published: 2024-02-06T02:23:12.460Z Last Updated: 2025-04-24T15:49:46.949Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Galaxy Store Problem Types: CWE-927 : Use of Implicit Intent for Sensitive Communication Description: Implicit intent hijacking vulnerability in AccountActivity of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=02
CVE ID: CVE-2024-20823 State: PUBLISHED Published: 2024-02-06T02:23:13.477Z Last Updated: 2024-08-01T22:06:36.421Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Galaxy Store Problem Types: CWE-927 : Use of Implicit Intent for Sensitive Communication Description: Implicit intent hijacking vulnerability in SamsungAccount of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=02
CVE ID: CVE-2024-20824 State: PUBLISHED Published: 2024-02-06T02:23:14.512Z Last Updated: 2024-08-01T22:06:36.395Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Galaxy Store Problem Types: CWE-927 : Use of Implicit Intent for Sensitive Communication Description: Implicit intent hijacking vulnerability in VoiceSearch of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=02
CVE ID: CVE-2024-20825 State: PUBLISHED Published: 2024-02-06T02:23:15.543Z Last Updated: 2025-05-15T19:45:17.152Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Galaxy Store Problem Types: CWE-927 : Use of Implicit Intent for Sensitive Communication Description: Implicit intent hijacking vulnerability in IAP of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=02
CVE ID: CVE-2024-20826 State: PUBLISHED Published: 2024-02-06T02:23:16.620Z Last Updated: 2024-08-01T22:06:36.595Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: UPHelper Problem Types: CWE-927 : Use of Implicit Intent for Sensitive Communication Description: Implicit intent hijacking vulnerability in UPHelper library prior to version 4.0.0 allows local attackers to access sensitive information via implicit intent. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=02
CVE ID: CVE-2024-20827 State: PUBLISHED Published: 2024-02-06T02:23:17.680Z Last Updated: 2024-08-01T22:06:36.478Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Gallery Problem Types: CWE-284 : Improper Access Control Description: Improper access control vulnerability in Samsung Gallery prior to version 14.5.04.4 allows physical attackers to access the picture using physical keyboard on the lockscreen. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=02
CVE ID: CVE-2024-20828 State: PUBLISHED Published: 2024-02-06T02:23:18.791Z Last Updated: 2024-08-01T22:06:36.231Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Internet Problem Types: CWE-863 Incorrect Authorization Description: Improper authorization verification vulnerability in Samsung Internet prior to version 24.0 allows physical attackers to access files downloaded in SecretMode without proper authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=02
CVE ID: CVE-2024-20829 State: PUBLISHED Published: 2024-03-05T04:44:37.660Z Last Updated: 2024-08-01T22:06:36.372Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Internet Problem Types: CWE-863 Incorrect Authorization Description: Missing proper interaction for opening deeplink in Samsung Internet prior to version v24.0.0.0 allows remote attackers to open an application without proper interaction. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=03
CVE ID: CVE-2024-20830 State: PUBLISHED Published: 2024-03-05T04:44:38.773Z Last Updated: 2024-08-01T22:06:36.507Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-276: Incorrect Default Permissions Description: Incorrect default permission in AppLock prior to SMR MAr-2024 Release 1 allows local attackers to configure AppLock settings. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=03
CVE ID: CVE-2024-20831 State: PUBLISHED Published: 2024-03-05T04:44:39.858Z Last Updated: 2024-08-23T19:08:14.968Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-703: Improper Check or Handling of Exceptional Conditions Description: Stack overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows local privileged attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=03
CVE ID: CVE-2024-20832 State: PUBLISHED Published: 2024-03-05T04:44:40.971Z Last Updated: 2025-04-16T15:56:33.257Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20: Improper Input Validation Description: Heap overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows local privileged attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=03
CVE ID: CVE-2024-20833 State: PUBLISHED Published: 2024-03-05T08:08:35.007Z Last Updated: 2024-08-01T22:06:36.373Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-367 : Time-of-check Time-of-use (TOCTOU) Race Condition Description: Use after free vulnerability in pub_crypto_recv_msg prior to SMR Mar-2024 Release 1 due to race condition allows local attackers with system privilege to cause memory corruption. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=03
CVE ID: CVE-2024-20834 State: PUBLISHED Published: 2024-03-05T04:44:43.171Z Last Updated: 2024-08-01T22:06:36.493Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-927 : Use of Implicit Intent for Sensitive Communication Description: The sensitive information exposure vulnerability in WlanTest prior to SMR Mar-2024 Release 1 allows local attackers to access MAC address without proper permission. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=03
CVE ID: CVE-2024-20835 State: PUBLISHED Published: 2024-03-05T04:44:44.224Z Last Updated: 2024-08-16T19:52:14.967Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-863 Incorrect Authorization Description: Improper access control vulnerability in CustomFrequencyManagerService prior to SMR Mar-2024 Release 1 allows local attackers to execute privileged behaviors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=03
CVE ID: CVE-2024-20836 State: PUBLISHED Published: 2024-03-05T04:44:45.366Z Last Updated: 2024-08-01T22:06:36.648Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-125: Out-of-bounds Read Description: Out of bounds Read vulnerability in ssmis_get_frm in libsubextractor.so prior to SMR Mar-2024 Release 1 allows local attackers to read out of bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=03
CVE ID: CVE-2024-20837 State: PUBLISHED Published: 2024-03-05T04:44:46.414Z Last Updated: 2024-08-01T22:06:36.497Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Internet Problem Types: CWE-280: Improper Handling of Insufficient Permissions or Privileges Description: Improper handling of granting permission for Trusted Web Activities in Samsung Internet prior to version 24.0.0.41 allows local attackers to grant permission to their own TWA WebApps without user interaction. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&mont
P Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=03
CVE ID: CVE-2024-20838 State: PUBLISHED Published: 2024-03-05T04:44:47.533Z Last Updated: 2024-08-01T22:06:36.395Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Internet Problem Types: CWE-284: Improper Access Control Description: Improper validation vulnerability in Samsung Internet prior to version 24.0.3.2 allows local attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=03
CVE ID: CVE-2024-20839 State: PUBLISHED Published: 2024-03-05T04:44:48.626Z Last Updated: 2024-08-01T22:06:36.398Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Voice Recorder Problem Types: CWE-284: Improper Access Control Description: Improper access control in Samsung Voice Recorder prior to versions 21.5.16.01 in Android 12 and Android 13, 21.4.51.02 in Android 14 allows physical attackers to access recording files on the lock screen. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=03
CVE ID: CVE-2024-20840 State: PUBLISHED Published: 2024-03-05T04:44:49.707Z Last Updated: 2024-08-01T22:06:36.466Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H) Vendors: Samsung Mobile Products: Samsung Voice Recorder Problem Types: CWE-284: Improper Access Control Description: Improper access control in Samsung Voice Recorder prior to versions 21.5.16.01 in Android 12 and Android 13, 21.4.51.02 in Android 14 allows physical attackers using hardware keyboard to use VoiceRecorder on the lock screen. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=03