Medium WID-SEC-2024-0008 5 CVEs

Samsung Android: Mehrere Schwachstellen

Published Jan 3, 2024 · Updated Jan 3, 2024 · de-DE

Vendor: Samsung Product: Android Product: Android 11 < SMR Jan-2024 Release 1 Product: Android 12 < SMR Jan-2024 Release 1 Product: Android 13 < SMR Jan-2024 Release 1 Product: Android 14 < SMR Jan-2024 Release 1 Platform: Android

Summary

Ein Angreifer kann mehrere Schwachstellen in Samsung Android ausnutzen, um Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.

Product

Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.

Vulnerabilities 5

Medium 6.8

CVE-2024-20803

Improper authentication vulnerability in Bluetooth pairing process prior to SMR Jan-2024 Release 1 allows remote attack…

Samsung Mobile Samsung Mobile Devices

Jan 4, 2024
Medium 6.2

CVE-2024-20806

Improper access control in Notification service prior to SMR Jan-2024 Release 1 allows local attacker to access notific…

Samsung Mobile Samsung Mobile Devices

Jan 4, 2024
Medium 4.6

CVE-2024-20802

Improper access control vulnerability in Samsung DeX prior to SMR Jan-2024 Release 1 allows owner to access other users…

Samsung Mobile Samsung Mobile Devices

Jan 4, 2024
Medium 4.0

CVE-2024-20804

Path traversal vulnerability in FileUriConverter of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 1…

Samsung Mobile Samsung Mobile Devices

Jan 4, 2024
Low 3.3

CVE-2024-20805

Path traversal vulnerability in ZipCompressor of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, …

Samsung Mobile Samsung Mobile Devices

Jan 4, 2024

Revision history

2024-01-03 #1
Initiale Fassung

References

Samsung Security Update vom 2024-01-03
https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=01