Summary
Ein Angreifer kann mehrere Schwachstellen in Samsung Android ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern und einen Denial-of-Service-Zustand auszulösen.
Product
Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
Vulnerabilities 53
-
High 7.9
Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel
A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. …
KEV Mar 30, 2023 -
Critical 9.8
-
Critical 9.8
In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic…
-
High 8.8
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing opera…
-
High 8.8
Heap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows remote attacker to exec…
-
High 8.4
Incorrect Type Conversion or Cast in Graphics
Memory corruption in Graphics while importing a file.
-
High 8.4
Improper Release of Memory Before Removing Last Reference (`Memory Leak`) in Graphics
Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.
-
High 7.8
In __efi_rt_asm_wrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error…
-
High 7.8
In adreno_set_param of adreno_gpu.c, there is a possible memory corruption due to a double free. This could lead to loc…
-
High 7.5
Null pointer dereference in Modem
Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH.
-
High 7.5
Reachable assertion in Modem
Transient DOS due to reachable assertion in Modem during OSI decode scheduling.
-
High 7.5
Reachable assertion in Modem
Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.
-
High 7.5
Reachable assertion in Modem
Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported.
-
Medium 6.7
In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio…
-
Medium 6.7
In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio…
-
Medium 6.7CVE-2023-20696 Public exploit
In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio…
-
Medium 6.1
Improper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows physical attackers to man…
-
Medium 5.5
In thermal service, there is a possible out of bounds write due to a missing bounds check. This could lead to local den…
-
Medium 4.4
An issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper GPU memory processing op…
-
Medium 4.4
In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial o…
-
Medium 4.4
In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial o…
-
Medium 4.4
In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local …
-
Medium 4.4
In spipe drive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial …
-
Medium 4.4
In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati…
-
Medium 4.4
In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati…
-
Low 3.3
In mnld, there is a possible leak of GPS location due to a missing permission check. This could lead to local informati…
-
Low 2.4
Improper Knox ID validation logic in notification framework prior to SMR Jun-2023 Release 1 allows local attackers to r…
-
Unscored —CVE-2022-46395 Public exploit
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing opera…
-
Unscored —
An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make im…
-
Unscored —
In canStartSystemGesture of RecentsAnimationDeviceState.java, there is a possible partial lockscreen bypass due to a ra…
-
Unscored —
In multiple functions of ChooserActivity.java, there is a possible cross-user media read due to a confused deputy. This…
-
Unscored —
In sdpu_build_uuid_seq of sdp_discovery.cc, there is a possible out of bounds write due to a use after free. This could…
-
Unscored —
In btm_sec_encrypt_change of btm_sec.cc, there is a possible way to downgrade the link key type due to improperly used …
-
Unscored —
In onResume of AppManagementFragment.java, there is a possible way to prevent users from forgetting a previously connec…
-
Unscored —
In various functions of various files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction fo…
-
Unscored —
In multiple functions of multiple files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction …
-
Unscored —
In run of multiple files, there is a possible escalation of privilege due to unsafe deserialization. This could lead to…
-
Unscored —
In bindOutputSwitcherAndBroadcastButton of MediaControlPanel.java, there is a possible launch arbitrary activity under …
-
Unscored —
In readSampleData of NuMediaExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This coul…
-
Unscored —
In various functions of AppStandbyController.java, there is a possible way to break manageability scenarios due to a lo…
-
Unscored —
In getFullScreenIntentDecision of NotificationInterruptStateProviderImpl.java, there is a possible activity launch whil…
-
Unscored —
In btm_ble_periodic_adv_sync_lost of btm_ble_gap.cc, there is a possible remote code execution due to a buffer overflow…
-
Unscored —
In checkKeyIntentParceledCorrectly() of ActivityManagerService.java, there is a possible bypass of Parcel Mismatch miti…
-
Unscored —
In onCreate of NotificationAccessSettings.java, there is a possible failure to persist notifications settings due to im…
-
Unscored —
In multiple functions of JobStore.java, there is a possible way to cause a crash on startup due to improper input valid…
-
Unscored —
In several methods of JobStore.java, uncaught exceptions in job map parsing could lead to local persistent denial of se…
-
Unscored —
In onNullBinding of CallRedirectionProcessor.java, there is a possible long lived connection due to improper input vali…
-
Unscored —
In bindPlayer of MediaControlPanel.java, there is a possible launch arbitrary activity in SysUI due to Unsafe Intent. T…
-
Unscored —
In several functions of several files, there is a possible way to access developer mode traces due to a permissions byp…
-
Unscored —
In multiple files, there is a possible way to access traces in the dev mode due to a permissions bypass. This could lea…
-
Unscored —
In multiple functions of multiple files, there is a possible way to make the device unusable due to improper input vali…
-
Unscored —
In doInBackground of NotificationContentInflater.java, there is a possible temporary denial or service due to long runn…
-
Unscored —
A possible out-of-bounds read and write (due to an improper length check of shared memory) was discovered in Arm NN And…
Revision history
-
#1
Initiale Fassung
References
-
Samsung Mobile Security - Security Updates vom 2023-06-05
https://security.samsungmobile.com/securityUpdate.smsb