Samsung Members vulnerabilities

3 known vulnerabilities affecting samsung/samsung_members.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1LOW2

Vulnerabilities

Page 1 of 1

CVE-2022-36877LOWCVSS 3.3fixed in 4.3.00.11fixed in 14.0.02.42022-09-09

CVE-2022-36877 [LOW] CWE-200 CVE-2022-36877: Exposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4. Exposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4.3.00.11 in Global and 14.0.02.4 in China allows local attackers to access device identification via log.

CVE-2021-25432LOWCVSS 3.3fixed in 2.4.85.11v3.9.10.112021-07-08

CVE-2021-25432 [LOW] CWE-200 CVE-2021-25432: Information exposure vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) Information exposure vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to access chat data.

CVE-2018-11614HIGHCVSS 8.8fixed in 2.4.25vFixed in version 2.4.252018-09-24

CVE-2018-11614 [HIGH] CWE-269 CVE-2018-11614: This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Sam This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Samsung Members Fixed in version 2.4.25. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of Intents. The issue lies in the ab