Samsung Products Multiple Vulnerabilities
Release Date: 8 Oct 2024
RISK: Medium Risk
TYPE: Operating Systems - Mobile & Apps
Multiple vulnerabilities were identified in Samsung Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution and security restriction bypass on the targeted system.
Impact
- Denial of Service
- Elevation of Privilege
- Security Restriction Bypass
- Remote Code Execution
System / Technologies affected
- Android security patch level prior to 2024-10-05
- Android 12, 13, 14
- SMR Oct-2024 Release 1 in select Android 12, 13 and SMR Sep-2024 Release 1 in select Android 14
- Exynos 9820, 9825, 980, 990, 850, W920
For affected products, please refer to the link below:
https://security.samsungmobile.com/securityUpdate.smsb
https://semiconductor.samsung.com/support/quality-support/product-security-updates/
Solutions
Before installation of the software, please visit the vendor web-site for more details.
- Apply fixes issued by the vendor:
https://security.samsungmobile.com/securityUpdate.smsb
https://semiconductor.samsung.com/support/quality-support/product-security-updates/
Vulnerability Identifier
- CVE-2024-0044
- CVE-2024-3655
- CVE-2024-20017
- CVE-2024-23358
- CVE-2024-23359
- CVE-2024-23362
- CVE-2024-23364
- CVE-2024-23365
- CVE-2024-23716
- CVE-2024-31336
- CVE-2024-33016
- CVE-2024-33034
- CVE-2024-33035
- CVE-2024-33038
- CVE-2024-33042
- CVE-2024-33043
- CVE-2024-33045
- CVE-2024-33048
- CVE-2024-33050
- CVE-2024-33051
- CVE-2024-33052
- CVE-2024-33054
- CVE-2024-33057
- CVE-2024-33060
- CVE-2024-34662
- CVE-2024-34663
- CVE-2024-34664
- CVE-2024-34665
- CVE-2024-34666
- CVE-2024-34667
- CVE-2024-34668
- CVE-2024-34669
- CVE-2024-36972
- CVE-2024-40672
- CVE-2024-40673
- CVE-2024-40674
- CVE-2024-40675
- CVE-2024-40676
- CVE-2024-40677
- CVE-2024-44068
沒有留言:
發佈留言