Summary
Ein Angreifer kann mehrere Schwachstellen in Samsung Android und Samsung Exynos ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern und Daten zu manipulieren.
Product
Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
Exynos ist der Markenname für Samsung-Mobilfunk-Chipsätze und Prozessoren.
Vulnerabilities 21
-
Medium 4.4CVE-2023-21492 Exploited
Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypas…
KEV May 19, 2023 -
High 8.5
Improper access control vulnerability in ThemeManager prior to SMR May-2023 Release 1 allows local attackers to write a…
-
High 8.2
Out-of-bounds write vulnerability in TA_Communication_mpos_encrypt_pin in mPOS TUI trustlet prior to SMR May-2023 Relea…
-
High 8.2
Improper input validation vulnerability in mPOS fiserve trustlet prior to SMR May-2023 Release 1 allows local attackers…
-
High 7.1
Heap out-of-bounds write vulnerability in bootloader prior to SMR May-2023 Release 1 allows a physical attacker to exec…
-
Medium 6.8
Improper access control vulnerability in SemShareFileProvider prior to SMR May-2023 Release 1 allows local attackers to…
-
Medium 6.1
Active Debug Code vulnerability in ActivityManagerService prior to SMR May-2023 Release 1 allows attacker to use debug …
-
Medium 6.0
Improper input validation vulnerability in setPartnerTAInfo in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows…
-
Medium 6.0
Double free validation vulnerability in setPinPadImages in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows loc…
-
Medium 5.7
Improper input validation vulnerability in FactoryTest application prior to SMR May-2023 Release 1 allows local attacke…
-
Medium 5.6
Potential buffer overflow vulnerability in auth api in mm_Authentication.c in Shannon baseband prior to SMR May-2023 Re…
-
Medium 5.6
Potential buffer overflow vulnerability in mm_LteInterRatManagement.c in Shannon baseband prior to SMR May-2023 Release…
-
Medium 5.6
Potential buffer overflow vulnerability in mm_Plmncoordination.c in Shannon baseband prior to SMR May-2023 Release 1 al…
-
Medium 5.3
Improper export of android application components vulnerability in VideoPreviewActivity in Call Settings to SMR May-202…
-
Medium 5.3
Improper export of android application components vulnerability in ImagePreviewActivity in Call Settings to SMR May-202…
-
Medium 5.1
Improper access control vulnerability in AppLock prior to SMR May-2023 Release 1 allows local attackers without proper …
-
Medium 5.1
Improper access control vulnerability in Telephony framework prior to SMR May-2023 Release 1 allows local attackers to …
-
Medium 4.7
Improper access control in GearManagerStub prior to SMR May-2023 Release 1 allows a local attacker to delete applicatio…
-
Medium 4.4
Improper access control vulnerablility in Tips prior to SMR May-2023 Release 1 allows local attackers to launch arbitra…
-
Medium 4.4
Use of externally-controlled format string vulnerability in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows lo…
-
Medium 4.0
Improper access control vulnerability in Knox Enrollment Service prior to SMR May-2023 Release 1 allow attacker install…
Revision history
-
#2
Aktive Ausnutzung gemeldet
-
#1
Initiale Fassung
References
-
Known Exploited Vulnerabilities Catalog vom 2023-05-21
https://www.cisa.gov/news-events/alerts/2023/05/19/cisa-adds-three-known-exploited-vulnerabilities-catalog
-
Samsung Mobile Security - Security Updates vom 2023-05-01
https://security.samsungmobile.com/securityUpdate.smsb