Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Samsung Android ausnutzen, um beliebigen Code auszuführen oder um vertrauliche Informationen offenzulegen.
Product
Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
Vulnerabilities 12
-
High 8.4
Out-of-bounds write vulnerability while parsing remaining codewords in libsavsac.so prior to SMR Apr-2024 Release 1 all…
-
High 8.4
Out-of-bounds write vulnerability while releasing memory in libsavsac.so prior to SMR Apr-2024 Release 1 allows local a…
-
High 7.8
In assertPackageWithSharedUserIdIsPrivileged of InstallPackageHelper.java, there is a possible execution of arbitrary a…
-
High 7.8
In migrateNotificationFilter of NotificationManagerService.java, there is a possible failure to persist notifications s…
-
High 7.3
Out-of-bound Write vulnerability in chunk parsing implementation of libsdffextractor prior to SMR Apr-2023 Release 1 al…
-
High 7.0
In onCreate of WifiDialogActivity.java, there is a possible way to bypass the DISALLOW_ADD_WIFI_CONFIG restriction due …
-
Medium 5.9
Out-of-bounds write vulnerability while decoding hcr of libsavsac.so prior to SMR Apr-2024 Release 1 allows local attac…
-
Medium 5.6
Out-of-bound write vulnerability in command parsing implementation of libIfaaCa prior to SMR Apr-2024 Release 1 allows …
-
Medium 5.5
In multiple functions of AppOpsService.java, there is a possible way to saturate the content of /data/system/appops_acc…
-
Medium 5.1
Improper Input Validation vulnerability in text parsing implementation of libsdffextractor prior to SMR Apr-2024 Releas…
-
Medium 4.2
Improper Input Validation vulnerability in handling apdu of libsec-ril prior to SMR Apr-2024 Release 1 allows local pri…
-
Medium 4.0
Improper Access Control vulnerability in StorageManagerService prior to SMR Apr-2024 Release 1 allows local attackers t…
Revision history
-
#1
Initiale Fassung
References
-
Samsung Mobile Security vom 2024-04-01
https://security.samsungmobile.com/securityUpdate.smsb