Summary
Ein entfernter Angreifer kann mehrere Schwachstellen in Samsung Android ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.
Product
Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
Vulnerabilities 63
-
High 8.8
libwebp: OOB write in BuildHuffmanTable
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
KEV Sep 13, 2023 -
High 8.4CVE-2022-22071 Exploited
Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in pro…
KEV Dec 5, 2023 -
High 8.4CVE-2023-33106 Exploited
Use of Out-of-range Pointer Offset in Graphics
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
KEV Dec 5, 2023 -
High 8.4
Integer Overflow or Wraparound in Graphics Linux
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
KEV Dec 5, 2023 -
High 7.8CVE-2023-33063 Exploited
Use After Free in DSP Services
Memory corruption in DSP Services during a remote call from HLOS to DSP.
KEV Dec 5, 2023 -
Medium 5.5CVE-2023-4211 Exploited
Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.
KEV Oct 3, 2023 -
Critical 9.8
Use of Out-of-range Pointer Offset in Modem
Memory corruption in Modem while processing security related configuration before AS Security Exchange.
-
Critical 9.8
Buffer Copy without Checking Size of Input in WLAN Firmware
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.
-
Critical 9.8
In readLogs of StatsService.cpp, there is a possible memory corruption due to a use after free. This could lead to loca…
-
Critical 9.1
Improper Authentication in Data Modem
Cryptographic issue in Data Modem due to improper authentication during TLS handshake.
-
High 8.7
Improper Access Control in Kernel
Improper Access to the VM resource manager can lead to Memory Corruption.
-
High 8.4
Improper Access Control in Core
Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range.
-
High 8.4
Improper Input Validation in HLOS
Memory Corruption in HLOS while registering for key provisioning notify.
-
High 8.4
Use After Free in DSP Service
Memory corruption in DSP Service during a remote call from HLOS to DSP.
-
High 8.4
In discovery_thread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This coul…
-
High 8.4
In multiple functions of MtpFfsHandle.cpp , there is a possible out of bounds write due to a use after free. This could…
-
High 8.4
Out-of-bounds Write in read_block of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary co…
-
High 8.4
An improper input validation in saped_dec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause o…
-
High 8.4
An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to caus…
-
High 8.2
Buffer Over-read in Data Modem
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
-
High 8.2
Buffer Over-read in Data Modem
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
-
High 8.2
Buffer Over-read in Data Modem
Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
-
High 7.8
Improper Validation of Array Index in HLOS
Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.
-
High 7.8
Signed-to-unsigned conversion error in Audio
Memory corruption while parsing the ADSP response command.
-
High 7.8
Buffer Copy Without Checking Size of Input in Audio
Memory corruption while invoking callback function of AFE from ADSP.
-
High 7.8
In sanitizeSbn of NotificationManagerService.java, there is a possible way to launch an activity from the background du…
-
High 7.8
In setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending intent on behalf of sys…
-
High 7.5
Reachable Assertion in Modem
Transient DOS in Modem while triggering a camping on an 5G cell.
-
High 7.5
NULL pointer Dereference in Modem
Transient DOS in Modem while allocating DSM items.
-
High 7.5
In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote deni…
-
High 7.5
Buffer over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing a NAN management frame.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing rsn ies.
-
High 7.5
In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. Thi…
-
High 7.4
In ARTPWriter of ARTPWriter.cpp, there is a possible use after free due to uninitialized data. This could lead to local…
-
High 7.3CVE-2023-40109 Public exploit
In createFromParcel of UsbConfiguration.java, there is a possible background activity launch (BAL) due to a permissions…
-
High 7.1
An issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem (Exynos 9810, …
-
High 7.1
An issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem (Exynos 9810, …
-
Medium 6.7
In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote …
-
Medium 6.7
Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to ex…
-
Medium 6.7
Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows loca…
-
Medium 6.7
Out-of-bound write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to execute arbitr…
-
Medium 6.7
Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi a…
-
Medium 6.6
Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execu…
-
Medium 6.3
Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to re…
-
Medium 6.2
In several functions of PhoneAccountRegistrar.java, there is a possible way to prevent an access to emergency services …
-
Medium 6.2
In multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap buffer overflow. This cou…
-
Medium 6.2
Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass …
-
Medium 5.9
Improper Certificate Validation in FotaAgent prior to SMR Nov-2023 Release1 allows remote attacker to intercept the net…
-
Medium 5.9
An improper input validation in saped_rec_silence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to…
-
Medium 5.6
Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023 Release 1 allows local …
-
Medium 5.5
In registerPhoneAccount of PhoneAccountRegistrar.java, uncaught exceptions in parsing persisted user data could lead to…
-
Medium 5.5
In backupAgentCreated of ActivityManagerService.java, there is a possible way to leak sensitive data due to a missing p…
-
Medium 5.5
In multiple locations, there is a possible way for apps to access cross-user message data due to a missing permission c…
-
Medium 5.5
In multiple locations, there is a possible cross-user read due to a confused deputy. This could lead to local informati…
-
Medium 5.1
In ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to lo…
-
Medium 4.7
Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations
A local non-privileged user can make improper GPU processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory.
-
Medium 4.7
Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations
A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them ac…
-
Unscored —
An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory.c. The get_user_pages …
-
Unscored —
Arm Mali GPU Kernel Driver (Midgard r26p0 through r30p0, Bifrost r0p0 through r34p0, and Valhall r19p0 through r34p0) a…
-
Unscored —
Arm Mali GPU Kernel Driver (Midgard r4p0 through r31p0, Bifrost r0p0 through r36p0 before r37p0, and Valhall r19p0 thro…
-
Unscored —
In launchConfirmationActivity of ChooseLockSettingsHelper.java, there is a possible way to enable developer options wit…
-
Unscored —
In display, there is a possible information disclosure due to a missing bounds check. This could lead to local informat…
-
Unscored —
In Telecom service, there is a possible missing permission check. This could lead to local denial of service with Syste…
Revision history
-
#2
Aktive Ausnutzung gemeldet
-
#1
Initiale Fassung
References
-
CISA Known Exploited Vulnerabilities Catalog vom 2023-12-05
https://www.cisa.gov/news-events/alerts/2023/12/05/cisa-adds-four-known-exploited-vulnerabilities-catalog
-
Samsung Security Update vom 2023-11-06
https://security.samsungmobile.com/securityUpdate.smsb