High WID-SEC-2024-1282 13 CVEs

Samsung Android: Mehrere Schwachstellen

Published Jun 3, 2024 · Updated Jun 3, 2024 · de-DE

Vendor: Samsung Product: Android Platform: Android

Summary

Ein Angreifer kann mehrere Schwachstellen in Samsung Android ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.

Product

Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.

Vulnerabilities 13

High 7.9

CVE-2024-20874

Improper access control vulnerability in SmartManagerCN prior to SMR Jun-2024 Release 1 allows local attackers to launc…

Samsung Mobile Samsung Mobile Devices

Jun 4, 2024
High 7.3

CVE-2024-20877

Heap out-of-bound write vulnerability in parsing grid image header in libsavscmn.so prior to SMR Jun-2024 Release 1 all…

Samsung Mobile Samsung Mobile Devices

Jun 4, 2024
High 7.3

CVE-2024-20878

Heap out-of-bound write vulnerability in parsing grid image in libsavscmn.so prior to SMR June-2024 Release 1 allows lo…

Samsung Mobile Samsung Mobile Devices

Jun 4, 2024
Medium 6.4

CVE-2024-20880

Stack-based buffer overflow vulnerability in bootloader prior to SMR Jun-2024 Release 1 allows physical attackers to ov…

Samsung Mobile Samsung Mobile Devices

Jun 4, 2024
Medium 6.4

CVE-2024-20881

Improper input validation vulnerability in chnactiv TA prior to SMR Jun-2024 Release 1 allows local privileged attacker…

Samsung Mobile Samsung Mobile Devices

Jun 4, 2024
Medium 6.2

CVE-2024-20883

Incorrect use of privileged API vulnerability in registerBatteryStatsCallback in BatteryStatsService prior to SMR Jun-2…

Samsung Mobile Samsung Mobile Devices

Jun 4, 2024
Medium 6.2

CVE-2024-20884

Incorrect use of privileged API vulnerability in getSemBatteryUsageStats in BatteryStatsService prior to SMR Jun-2024 R…

Samsung Mobile Samsung Mobile Devices

Jun 4, 2024
Medium 6.1

CVE-2024-20876

Improper input validation in libsheifdecadapter.so prior to SMR Jun-2024 Release 1 allows local attackers to lead to me…

Samsung Mobile Samsung Mobile Devices

Jun 4, 2024
Medium 5.1

CVE-2024-20885

Improper component protection vulnerability in Samsung Dialer prior to SMR May-2024 Release 1 allows local attackers to…

Samsung Mobile Samsung Mobile Devices

Jun 4, 2024
Medium 4.6

CVE-2024-20882

Out-of-bounds read vulnerability in bootloader prior to SMR June-2024 Release 1 allows physical attackers to arbitrary …

Samsung Mobile Samsung Mobile Devices

Jun 4, 2024
Medium 4.2

CVE-2024-20873

Improper input validation vulnerability in caminfo driver prior to SMR Jun-2024 Release 1 allows local privileged attac…

Samsung Mobile Samsung Mobile Devices

Jun 4, 2024
Medium 4.0

CVE-2024-20875

Improper caller verification vulnerability in SemClipboard prior to SMR June-2024 Release 1 allows local attackers to a…

Samsung Mobile Samsung Mobile Devices

Jun 4, 2024
Medium 4.0

CVE-2024-20879

Improper input validation vulnerability in libsavscmn.so prior to SMR Jun-2024 Release 1 allows local attackers to writ…

Samsung Mobile Samsung Mobile Devices

Jun 4, 2024

Revision history

2024-06-03 #1
Initiale Fassung

References

Samsung Mobile Security vom 2024-06-03
https://security.samsungmobile.com/securityUpdate.smsb