Samsung: Security Vulnerabilities
Improper input validation vulnerability in setPartnerTAInfo in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to overwrite the trustlet memory.
CVSS Score
6.0
EPSS Score
0.0
Published
2023-05-04
Out-of-bounds write vulnerability in TA_Communication_mpos_encrypt_pin in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to execute arbitrary code.
CVSS Score
8.2
EPSS Score
0.0
Published
2023-05-04
Double free validation vulnerability in setPinPadImages in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the trustlet memory.
CVSS Score
6.0
EPSS Score
0.0
Published
2023-05-04
Improper input validation vulnerability in mPOS fiserve trustlet prior to SMR May-2023 Release 1 allows local attackers to execute arbitrary code.
CVSS Score
8.2
EPSS Score
0.0
Published
2023-05-04
Improper input validation vulnerability in FactoryTest application prior to SMR May-2023 Release 1 allows local attackers to get privilege escalation via debugging commands.
CVSS Score
5.7
EPSS Score
0.0
Published
2023-05-04
Potential buffer overflow vulnerability in mm_LteInterRatManagement.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause invalid memory access.
CVSS Score
5.6
EPSS Score
0.006
Published
2023-05-04
Potential buffer overflow vulnerability in mm_Plmncoordination.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause invalid memory access.
CVSS Score
5.6
EPSS Score
0.006
Published
2023-05-04
Improper access control in Samsung Core Service prior to version 2.1.00.36 allows attacker to write arbitrary file in sandbox.
CVSS Score
4.0
EPSS Score
0.001
Published
2023-05-04
Improper access control vulnerability in AppLock prior to SMR May-2023 Release 1 allows local attackers without proper permission to execute a privileged operation.
CVSS Score
5.1
EPSS Score
0.0
Published
2023-05-04
Improper export of android application components vulnerability in VideoPreviewActivity in Call Settings to SMR May-2023 Release 1 allows physical attackers to access some media data stored in sandbox.
CVSS Score
5.3
EPSS Score
0.001
Published
2023-05-04