8.4
Élevée
CVE-2022-27836 Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR…
Description
Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1 allow local attackers to access arbitrary system files without a proper permission. The patch adds proper validation logic to prevent arbitrary files access.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Samsung Mobile Devices | Versions non publiées |
Autres CVE de Samsung Mobile Devices
Les 866 CVE de Samsung Mobile Devices →
CVE-2026-21126
Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1…
6.9
Moyenne
CVE-2026-21125
Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1…
8.6
Élevée
CVE-2026-21124
Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1…
8.6
Élevée
CVE-2026-21123
Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with…
6.7
Moyenne