Skip to content

Known vulnerabilities in Samsung Mobile Devices

Is your version affected?

CVE Summary Score Published
CVE-2024-34647 Incorrect use of privileged API in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to… 4.0 Medium Sep 4, 2024
CVE-2024-34646 Improper access control in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to cause local… 6.6 Medium Sep 4, 2024
CVE-2024-34645 Improper input validation in ThemeCenter prior to SMR Sep-2024 Release 1 allows physical attackers to install privileged… 6.1 Medium Sep 4, 2024
CVE-2024-34644 Improper access control in item selection related in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to… 4.4 Medium Sep 4, 2024
CVE-2024-34643 Improper access control in key input related function in Dressroom prior to SMR Sep-2024 Release 1 allows local… 4.4 Medium Sep 4, 2024
CVE-2024-34642 Improper authorization in One UI Home prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access… 4.6 Medium Sep 4, 2024
CVE-2024-34641 Improper Export of Android Application Components in FeliCaTest prior to SMR Sep-2024 Release 1 allows local attackers… 5.1 Medium Sep 4, 2024
CVE-2024-34640 Improper access control vulnerability in BGProtectManager prior to SMR Sep-2024 Release 1 allows local attackers to… 3.3 Low Sep 4, 2024
CVE-2024-34639 Improper handling of exceptional conditions in Setupwizard prior to SMR Aug-2024 Release 1 allows physical attackers… 4.6 Medium Sep 4, 2024
CVE-2024-34638 Improper handling of exceptional conditions in ThemeCenter prior to SMR Sep-2024 Release 1 allows local attackers to… 6.7 Medium Sep 4, 2024
CVE-2024-34637 Improper access control in WindowManagerService prior to SMR Sep-2024 Release 1 in Android 12, and SMR Jun-2024… 6.2 Medium Sep 4, 2024
CVE-2024-34620 Improper privilege management in SumeNNService prior to SMR Aug-2024 Release 1 allows local attackers to start… 8.4 High Aug 7, 2024
CVE-2024-34619 Improper input validation in librtp.so prior to SMR Aug-2024 Release 1 allows remote attackers to execute arbitrary code… 7.5 High Aug 7, 2024
CVE-2024-34618 Improper access control in System property prior to SMR Aug-2024 Release 1 allows local attackers to access cell related… 4.0 Medium Aug 7, 2024
CVE-2024-34617 Improper handling of insufficient permission in Telephony prior to SMR Aug-2024 Release 1 allows local attackers to… 4.0 Medium Aug 7, 2024
CVE-2024-34616 Improper handling of insufficient permission in KnoxDualDARPolicy prior to SMR Aug-2024 Release 1 allows local attackers… 5.1 Medium Aug 7, 2024
CVE-2024-34615 Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to cause memory corruption 5.1 Medium Aug 7, 2024
CVE-2024-34614 Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code 7.3 High Aug 7, 2024
CVE-2024-34613 Improper access control in Galaxy Watch prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive… 4.0 Medium Aug 7, 2024
CVE-2024-34612 Out-of-bound write in libcodec2secmp4vdec.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary… 7.3 High Aug 7, 2024
CVE-2024-34611 Improper access control in KnoxService prior to SMR Aug-2024 Release 1 allows local attackers to get sensitive… 5.1 Medium Aug 7, 2024
CVE-2024-34610 Improper access control in ExtControlDeviceService prior to SMR Aug-2024 Release 1 allows local attackers to access… 5.1 Medium Aug 7, 2024
CVE-2024-34609 Improper access control in VoiceNoteService prior to SMR Aug-2024 Release 1 allows local attackers to bypass… 6.2 Medium Aug 7, 2024
CVE-2024-34608 Improper access control in PaymentManagerService prior to SMR Aug-2024 Release 1 allows local attackers to bypass… 6.2 Medium Aug 7, 2024
CVE-2024-34607 Improper access control in SamsungNotesService prior to SMR Aug-2024 Release 1 allows local attackers to bypass… 6.2 Medium Aug 7, 2024

Other Samsung Mobile products