DeutschShown in its original language — a full translation is planned for a future version.
Samsung Android: Mehrere Schwachstellen
view advisory published 2024-07-01
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Samsung Android ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder Dateien zu manipulieren.
01
describes (27)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-34595US | high7.8 | — | ||
Improper access control in clickAdapterItem of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities. | ||||
| CVE-2024-34594US | medium5.5 | — | ||
Exposure of sensitive information in proc file system prior to SMR Jul-2024 Release 1 allows local attackers to read kernel memory address. | ||||
| CVE-2024-34593US | high8.8 | — | ||
Improper input validation in parsing and distributing RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with system privile… | ||||
| CVE-2024-34592US | medium4.3 | — | ||
Improper input validation in parsing RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction… | ||||
| CVE-2024-34591US | medium4.3 | — | ||
Improper input validation in parsing an item data from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service.… | ||||
| CVE-2024-34590US | medium4.3 | — | ||
Improper input validation혻in parsing an item type from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service.… | ||||
| CVE-2024-34589US | medium6.5 | — | ||
Improper input validation in parsing RTCP RR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is… | ||||
| CVE-2024-34588US | medium6.5 | — | ||
Improper input validation혻in parsing RTCP SR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is… | ||||
| CVE-2024-34587US | medium6.8 | — | ||
Improper input validation in parsing application information from RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with sy… | ||||
| CVE-2024-34586US | low3.3 | — | ||
Improper access control in KnoxCustomManagerService prior to SMR Jul-2024 Release 1 allows local attackers to configure Knox privacy policy. | ||||
| CVE-2024-34585US | high7.8 | — | ||
Improper access control in launchApp of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities. | ||||
| CVE-2024-34584US | — | — | ||
Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. Reason: An additional patch is required. | ||||
| CVE-2024-34583US | low3.3 | — | ||
Improper access control in system property prior to SMR Jul-2024 Release 1 allows local attackers to get device identifier. | ||||
| CVE-2024-20901US | high7.8 | — | ||
Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local attackers to write out-of-bounds memory. | ||||
| CVE-2024-20900US | low3.3 | — | ||
Improper authentication in MTP application prior to SMR Jul-2024 Release 1 allows local attackers to enter MTP mode without proper authentication. | ||||
| CVE-2024-20899US | medium5.5 | — | ||
Use of implicit intent for sensitive communication in RCS function in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information. | ||||
| CVE-2024-20898US | medium5.5 | — | ||
Use of implicit intent for sensitive communication in SoftphoneClient in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information. | ||||
| CVE-2024-20897US | medium5.5 | — | ||
Use of implicit intent for sensitive communication in FCM function in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information. | ||||
| CVE-2024-20896US | medium5.5 | — | ||
Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information. | ||||
| CVE-2024-20895US | medium5.5 | — | ||
Improper access control in Dar service prior to SMR Jul-2024 Release 1 allows local attackers to bypass restriction for calling SDP features. | ||||
showing 20 of 27
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan