Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Samsung Android ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder Dateien zu manipulieren.
Product
Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
Vulnerabilities 27
-
High 7.8
Improper access control in OneUIHome prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activi…
-
High 7.8
Improper access control in launchFullscreenIntent of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to…
-
High 7.8
Improper access control in launchApp of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privi…
-
High 7.8
Improper access control in clickAdapterItem of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launc…
-
High 7.7
Improper access control in Dar service prior to SMR Jul-2024 Release 1 allows local attackers to bypass restriction for…
-
High 7.5
Improper input validation in parsing application information from RTCP packet in librtp.so prior to SMR Jul-2024 Releas…
-
High 7.5
Improper input validation in parsing and distributing RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows r…
-
Medium 6.5
Improper verification of signature in FilterProvider prior to SMR Jul-2024 Release 1 allows local attackers to execute …
-
Medium 6.1
Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows local attackers to trig…
-
Medium 5.9
Improper authentication in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to pair with devices.
-
Medium 5.9
Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local atta…
-
Medium 5.9
Improper access control in KnoxCustomManagerService prior to SMR Jul-2024 Release 1 allows local attackers to configure…
-
Medium 5.5
Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Release 1 allows loca…
-
Medium 5.5
Exposure of sensitive information in proc file system prior to SMR Jul-2024 Release 1 allows local attackers to read ke…
-
Medium 5.3
Improper input validation in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to trigger abnormal behavior.
-
Medium 5.3
Improper input validation혻in parsing RTCP SR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attacker…
-
Medium 5.3
Improper input validation in parsing RTCP RR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attacker…
-
Medium 5.3
Improper input validation혻in parsing an item type from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 al…
-
Medium 5.3
Improper input validation in parsing an item data from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 al…
-
Medium 5.3
Improper input validation in parsing RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attack…
-
Medium 4.3
Improper handling of exceptional conditions in Secure Folder prior to SMR Jul-2024 Release 1 allows physical attackers …
-
Medium 4.0
Use of implicit intent for sensitive communication in FCM function in IMS service prior to SMR Jul-2024 Release 1 allow…
-
Medium 4.0
Use of implicit intent for sensitive communication in SoftphoneClient in IMS service prior to SMR Jul-2024 Release 1 al…
-
Medium 4.0
Use of implicit intent for sensitive communication in RCS function in IMS service prior to SMR Jul-2024 Release 1 allow…
-
Medium 4.0
Improper authentication in MTP application prior to SMR Jul-2024 Release 1 allows local attackers to enter MTP mode wit…
-
Medium 4.0
Improper access control in system property prior to SMR Jul-2024 Release 1 allows local attackers to get device identif…
-
Unscored —CVE-2024-34584 Rejected
** REJECT ** DO NOT USE THIS CVE RECORD. Reason: An additional patch is required.
Revision history
-
#1
Initiale Fassung
References
-
Samsung Mobile Security vom 2024-07-01
https://security.samsungmobile.com/securityUpdate.smsb