Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Samsung Android ausnutzen, um auf Ressourcen zuzugreifen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen preiszugeben.
Product
Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
Vulnerabilities 18
-
Medium 6.7
Improper handling of exceptional conditions in ThemeCenter prior to SMR Sep-2024 Release 1 allows local attackers to de…
-
Medium 6.6
Improper access control in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to cause local pe…
-
Medium 6.2
Improper access control in WindowManagerService prior to SMR Sep-2024 Release 1 in Android 12, and SMR Jun-2024 Release…
-
Medium 6.2
Improper authorization in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access restricted data in …
-
Medium 6.2
Improper Export of android application component in My Files prior to SMR Sep-2024 Release 1 allows local attackers to …
-
Medium 6.2
Incorrect use of privileged API in UniversalCredentialManager prior to SMR Sep-2024 Release 1 allows local attackers to…
-
Medium 6.1
Improper input validation in ThemeCenter prior to SMR Sep-2024 Release 1 allows physical attackers to install privilege…
-
Medium 5.1
Improper Export of Android Application Components in FeliCaTest prior to SMR Sep-2024 Release 1 allows local attackers …
-
Medium 5.1
Improper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allows local attackers …
-
Medium 4.6
Improper authorization in One UI Home prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access s…
-
Medium 4.6
Path Traversal in My Files prior to SMR Sep-2024 Release 1 allows physical attackers to access directories with My File…
-
Medium 4.4
Improper access control in key input related function in Dressroom prior to SMR Sep-2024 Release 1 allows local attacke…
-
Medium 4.4
Improper access control in item selection related in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers t…
-
Medium 4.0
Incorrect use of privileged API in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to access…
-
Medium 4.0
Incorrect authorization in CocktailbarService prior to SMR Sep-2024 Release 1 allows local attackers to access privileg…
-
Medium 4.0
Incorrect authorization in kperfmon prior to SMR Sep-2024 Release 1 allows local attackers to access information relate…
-
Low 3.3
Improper access control vulnerability in BGProtectManager prior to SMR Sep-2024 Release 1 allows local attackers to byp…
-
Low 2.4
Improper access control in new Dex Mode in multitasking framework prior to SMR Sep-2024 Release 1 allows physical attac…
Revision history
-
#1
Initiale Fassung
References
-
Samsung Mobile Security vom 2024-09-03
https://security.samsungmobile.com/securityUpdate.smsb