Vulnerabilidades

Una escritura fuera de los limites en la función "DoOemFactorySendFactoryBypassCommand" del componente libsec-ril anterior a SMR Aug-2023 Release 1 permite a un atacante local ejecutar código arbitrario.

Desajuste en AuthenticationConfig anterior a SMR Aug-2023 Release 1 permite a un atacante local la escalada de privilegios.

Escritura fuera de límites en BuildOemEmbmsGetSigStrengthResponse de libsec-ril antes de SMR Aug-2023 Release 1 permite a un atacante local ejecutar código arbitrario.

Escritura fuera de los límites en MakeUiccAuthForOem de libsec-ril anterior a SMR Aug-2023 Release 1 que permite a un atacante local ejecutar código arbitrario.

Escritura fuera de límites en RmtUimApdu de libsec-ril anterior a SMR Aug-2023 Release 1 que permite a un atacante local ejecutar código arbitrario.

Escritura fuera de límites en ReqDataRaw de libsec-ri anterior a SMR Aug-2023 Release 1 que permite a un atacante local ejecutar código arbitrario.

La vulnerabilidad de control de acceso inadecuado en Telecom anterior a SMR Aug-2023 Release 1 permite a los atacantes locales cambiar el modo TTY.

Control de acceso inadecuado en Samsung Telecom antes de SMR Aug-2023 Release 1 que permite a los atacantes locales llamar a la API acceptRingingCall sin permiso.

Control de acceso inadecuado en Telecom antes de SMR Aug-2023 Release 1 que permite a los atacantes locales llamar a la API "endcall" sin permiso.

Control de acceso inadecuado en Telecom en versiones anteriores a SMR Aug-2023 Release 1 que permite a los atacantes locales llamar a la API "silenceRinger" sin permiso.

Vulnerabilidad de validación de entrada inadecuada en la función de inicialización de HAL VaultKeeper anterior a SMR Aug-2023 Release 1 permite a un atacante provocar una escritura fuera de los límites.

Vulnerabilidad de gestión de privilegios inadecuada en MMIGroup anterior a SMR Aug-2023 Release 1 que permite la ejecución de código con privilegio.

Control de acceso inadecuado en HDCP trustlet anterior a SMR Aug-2023 Release 1 que permite a los atacantes locales ejecutar código arbitrario.

Improper access control vulnerability in SLocationService prior to SMR Aug-2023 Release 1 allows local attacker to update fake location.

In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07460540; Issue ID: ALPS07460540.

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453600; Issue ID: ALPS07453600.

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453589; Issue ID: ALPS07453589.

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453587; Issue ID: ALPS07453587.

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453560; Issue ID: ALPS07453560.

In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453549; Issue ID: ALPS07453549.

In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07944987; Issue ID: ALPS07944987.

In IOMMU, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03692061; Issue ID: DTV03692061.

In IOMMU, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03692061; Issue ID: DTV03692061.

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03751198; Issue ID: DTV03751198.

In OPTEE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03645895; Issue ID: DTV03645895.