Samsung: Security Vulnerabilities
Insufficient verification of data authenticity vulnerability in Samsung Gear IconX PC Manager prior to version 2.1.221019.51 allows local attackers to create arbitrary file using symbolic link.
CVSS Score
7.1
EPSS Score
0.001
Published
2022-12-08
Improper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical attackers to access data of Samsung Pass on a certain state of an unlocked device using pop-up view.
CVSS Score
3.9
EPSS Score
0.001
Published
2022-12-08
Improper check or handling of exceptional conditions vulnerability in Samsung Pass prior to version 4.0.06.1 allows attacker to access Samsung Pass.
CVSS Score
4.8
EPSS Score
0.001
Published
2022-12-08
Improper access control vulnerability in GalaxyWatch4Plugin prior to versions 2.2.11.22101351 and 2.2.12.22101351 allows attackers to access wearable device information.
CVSS Score
4.0
EPSS Score
0.001
Published
2022-11-09
Improper Authorization in Samsung Billing prior to version 5.0.56.0 allows attacker to get sensitive information.
CVSS Score
6.2
EPSS Score
0.002
Published
2022-11-09
Heap overflow vulnerability in parse_pce function in libsavsaudio.so in Editor Lite prior to version 4.0.41.3 allows attacker to get information.
CVSS Score
4.3
EPSS Score
0.003
Published
2022-11-09
Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature.
CVSS Score
3.6
EPSS Score
0.002
Published
2022-11-09
Sensitive information exposure vulnerability in FmmBaseModel in Galaxy Buds Pro Manage prior to version 4.1.22092751 allows local attackers with log access permission to get device identifier data through device log.
CVSS Score
3.3
EPSS Score
0.001
Published
2022-11-09
Improper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR Sep-2022 Release allows remote attacker to read out of bounds memory.
CVSS Score
5.3
EPSS Score
0.005
Published
2022-11-09
Improper authorization vulnerability in Samsung Internet prior to version 18.0.4.14 allows physical attackers to add bookmarks in secret mode without user authentication.
CVSS Score
4.3
EPSS Score
0.001
Published
2022-10-07