Samsung Android vulnerabilities

CVE-2023-21495 [MEDIUM] CWE-284 CVE-2023-21495: Improper access control vulnerability in Knox Enrollment Service prior to SMR May-2023 Release 1 all Improper access control vulnerability in Knox Enrollment Service prior to SMR May-2023 Release 1 allow attacker install KSP app when device admin is set.

CVE-2023-21422 [MEDIUM] CWE-285 CVE-2023-21422: Improper authorization vulnerability in semAddPublicDnsAddr in WifiSevice prior to SMR Jan-2023 Rele Improper authorization vulnerability in semAddPublicDnsAddr in WifiSevice prior to SMR Jan-2023 Release 1 allows attackers to set custom DNS server without permission via binding WifiService.

CVE-2024-20806 [MEDIUM] CVE-2024-20806: Improper access control in Notification service prior to SMR Jan-2024 Release 1 allows local attacke Improper access control in Notification service prior to SMR Jan-2024 Release 1 allows local attacker to access notification data.

CVE-2024-20896 [MEDIUM] CVE-2024-20896: Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Re Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.

CVE-2025-21003 [MEDIUM] CWE-922 CVE-2025-21003: Insecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows lo Insecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows local attackers to access sensitive information.

CVE-2025-20909 [MEDIUM] CVE-2025-20909: Use of implicit intent for sensitive communication in Settings prior to SMR Mar-2025 Release 1 allow Use of implicit intent for sensitive communication in Settings prior to SMR Mar-2025 Release 1 allows local attackers to access sensitive information.

CVE-2024-34637 [MEDIUM] CVE-2024-34637: Improper access control in WindowManagerService prior to SMR Sep-2024 Release 1 in Android 12, and S Improper access control in WindowManagerService prior to SMR Sep-2024 Release 1 in Android 12, and SMR Jun-2024 Release 1 in Android 13 and Android 14 allows local attackers to bypass restrictions on starting services from the background.

CVE-2024-20895 [MEDIUM] CVE-2024-20895: Improper access control in Dar service prior to SMR Jul-2024 Release 1 allows local attackers to byp Improper access control in Dar service prior to SMR Jul-2024 Release 1 allows local attackers to bypass restriction for calling SDP features.

CVE-2024-34609 [MEDIUM] CVE-2024-34609: Improper access control in VoiceNoteService prior to SMR Aug-2024 Release 1 allows local attackers t Improper access control in VoiceNoteService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.

CVE-2024-34606 [MEDIUM] CVE-2024-34606: Improper access control in SmartThingsService prior to SMR Aug-2024 Release 1 allows local attackers Improper access control in SmartThingsService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.

CVE-2024-34605 [MEDIUM] CVE-2024-34605: Improper access control in SamsungHealthService prior to SMR Aug-2024 Release 1 allows local attacke Improper access control in SamsungHealthService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.

CVE-2024-34608 [MEDIUM] CVE-2024-34608: Improper access control in PaymentManagerService prior to SMR Aug-2024 Release 1 allows local attack Improper access control in PaymentManagerService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.

CVE-2024-34604 [MEDIUM] CVE-2024-34604: Improper access control in LedCoverService prior to SMR Aug-2024 Release 1 allows local attackers to Improper access control in LedCoverService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.

CVE-2024-34607 [MEDIUM] CVE-2024-34607: Improper access control in SamsungNotesService prior to SMR Aug-2024 Release 1 allows local attacker Improper access control in SamsungNotesService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.

CVE-2025-21005 [MEDIUM] CVE-2025-21005: Improper access control in isemtelephony prior to Android 15 allows local attackers to access sensit Improper access control in isemtelephony prior to Android 15 allows local attackers to access sensitive information.

CVE-2025-20959 [MEDIUM] CVE-2025-20959: Use of implicit intent for sensitive communication in Wi-Fi P2P service prior to SMR May-2025 Releas Use of implicit intent for sensitive communication in Wi-Fi P2P service prior to SMR May-2025 Release 1 allows local attackers to access sensitive information.

CVE-2025-21001 [MEDIUM] CVE-2025-21001: Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to stop broadcasting Auracast.

CVE-2024-34680 [MEDIUM] CVE-2024-34680: Use of implicit intent for sensitive communication in WlanTest prior to SMR Nov-2024 Release 1 allow Use of implicit intent for sensitive communication in WlanTest prior to SMR Nov-2024 Release 1 allows local attackers to get sensitive information.

CVE-2024-34648 [MEDIUM] CWE-276 CVE-2024-34648: Improper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allo Improper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allows local attackers to access sensitive data.

CVE-2024-34603 [MEDIUM] CVE-2024-34603: Improper access control in Samsung Message prior to SMR Jul-2024 Release 1 allows local attackers to Improper access control in Samsung Message prior to SMR Jul-2024 Release 1 allows local attackers to access location data.