Samsung: Security Vulnerabilities
Improper access control vulnerability in SmartManagerCN prior to SMR Dec-2023 Release 1 allows local attackers to access arbitrary files with system privilege.
CVSS Score
7.3
EPSS Score
0.001
Published
2023-12-05
Improper authorization verification vulnerability in AR Emoji prior to SMR Dec-2023 Release 1 allows attackers to read sandbox data of AR Emoji.
CVSS Score
4.0
EPSS Score
0.001
Published
2023-12-05
Improper access control vulnerability in KnoxCustomManagerService prior to SMR Dec-2023 Release 1 allows attacker to access device SIM PIN.
CVSS Score
5.9
EPSS Score
0.001
Published
2023-12-05
Abuse of remote unlock in Find My Mobile prior to version 7.3.13.4 allows physical attacker to unlock the device remotely by resetting the Samsung Account password with SMS verification when user lost the device.
CVSS Score
7.6
EPSS Score
0.003
Published
2023-12-05
Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensitive information.
CVSS Score
3.3
EPSS Score
0.001
Published
2023-12-05
PendingIntent hijacking vulnerability in Search Widget prior to version 3.4 in China models allows local attackers to access data.
CVSS Score
4.7
EPSS Score
0.001
Published
2023-12-05
Integer overflow vulnerability in detectionFindFaceSupportMultiInstance of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow.
CVSS Score
6.7
EPSS Score
0.002
Published
2023-12-05
Integer overflow vulnerability in landmarkCopyImageToNative of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow.
CVSS Score
6.7
EPSS Score
0.002
Published
2023-12-05
Improper access control in knoxcustom service prior to SMR Dec-2023 Release 1 allows attacker to send broadcast with system privilege.
CVSS Score
6.6
EPSS Score
0.001
Published
2023-12-05
Improper input validation vulnerability in Smart Clip prior to SMR Dec-2023 Release 1 allows local attackers with shell privilege to execute arbitrary code.
CVSS Score
7.3
EPSS Score
0.001
Published
2023-12-05