Samsung Mobile CVEs
1,419 CVEs and advisories name Samsung Mobile as an affected vendor, 13 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2022-30714Information exposure vulnerability in SemIWCMonitor prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information.
- CVE-2022-30713Improper validation vulnerability in LSOItemData prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.
- CVE-2022-30712Improper validation vulnerability in KfaOptions prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.
- CVE-2022-30711Improper validation vulnerability in FeedsInfo prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.
- CVE-2022-30710Improper validation vulnerability in RemoteViews prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.
- CVE-2022-30709Improper input validation check logic vulnerability in SECRIL prior to SMR Jun-2022 Release 1 allows attackers to trigger crash.
- CVE-2022-28794Sensitive information exposure in low-battery dumpstate log prior to SMR Jun-2022 Release 1 allows local attackers to get SIM card informati
- CVE-2022-28793Given the TEE is compromised and controlled by the attacker, improper state maintenance in StrongBox allows attackers to change Android ROT
- CVE-2022-28792DLL hijacking vulnerability in Gear IconX PC Manager prior to version 2.1.220405.51 allows attacker to execute arbitrary code.
- CVE-2022-28791Improper input validation vulnerability in InstallAgent in Galaxy Store prior to version 4.5.41.8 allows attacker to overwrite files stored
- CVE-2022-28790Improper authentication in Link to Windows Service prior to version 2.3.04.1 allows attacker to lock the device.
- CVE-2022-28789Unprotected activities in Voice Note prior to version 21.3.51.11 allows attackers to record voice without user interaction.
- CVE-2022-28788Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows out of bounds read leading to possible tempo
- CVE-2022-28787Improper buffer size check logic in wmfextractor library prior to SMR May-2022 Release 1 allows out of bounds read leading to possible tempo
- CVE-2022-28786Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows out of bounds read leading to possible tempo
- CVE-2022-28785Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows out of bounds read leading to possible tempo
- CVE-2022-28784Path traversal vulnerability in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to list file names in arbitrary directory as
- CVE-2022-28783Improper validation of removing package name in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to uninstall arbitrary packag
- CVE-2022-28782Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to install package befo
- CVE-2022-28781Improper input validation in Settings prior to SMR-May-2022 Release 1 allows attackers to launch arbitrary activity with system privilege.
- CVE-2022-28780Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access location information that
- CVE-2022-28779Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attack
- CVE-2022-28778Improper access control vulnerability in Samsung Security Supporter prior to version 1.2.40.0 allows attacker to set the arbitrary folder as
- CVE-2022-28777Improper access control vulnerability in Samsung Members prior to version 13.6.08.5 allows local attacker to execute call function without C
- CVE-2022-28776Improper access control vulnerability in Galaxy Store prior to version 4.5.36.4 allows attacker to install applications from Galaxy Store wi
- CVE-2022-28775Improper access control vulnerability in Samsung Flow prior to version 4.8.06.5 allows attacker to write the file without Samsung Flow permi
- CVE-2022-28544Path traversal vulnerability in unzip method of InstallAgentCommonHelper in Galaxy store prior to version 4.5.40.5 allows attacker to access
- CVE-2022-28543Path traversal vulnerability in Samsung Flow prior to version 4.8.07.4 allows local attackers to read arbitrary files as Samsung Flow permis
- CVE-2022-28542Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.40.5 allows local attackers to access privileged content provi
- CVE-2022-28541Uncontrolled search path element vulnerability in Samsung Update prior to version 3.0.77.0 allows attackers to execute arbitrary code as Sam