Samsung Products Multiple Vulnerabilities

Release Date: 3 Dec 2024 430 Views

RISK: Medium Risk

TYPE: Operating Systems - Mobile & Apps

Multiple vulnerabilities were identified in Samsung Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution, security restriction bypass, data manipulation and sensitive information disclosure on the targeted system.

Note:

Impact

Denial of Service
Elevation of Privilege
Information Disclosure
Remote Code Execution
Security Restriction Bypass
Data Manipulation

System / Technologies affected

Galaxy Watch running Android Watch 13, 14
Samsung mobile devices running Android 12, 13, 14

For affected products, please refer to the link below:

https://security.samsungmobile.com/securityUpdate.smsb

https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:
https://security.samsungmobile.com/securityUpdate.smsb
https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Vulnerability Identifier

CVE-2023-35659
CVE-2023-35686
CVE-2024-20104
CVE-2024-20106
CVE-2024-21455
CVE-2024-23385
CVE-2024-23715
CVE-2024-31337
CVE-2024-34729
CVE-2024-34747
CVE-2024-36978
CVE-2024-38403
CVE-2024-38405
CVE-2024-38408
CVE-2024-38415
CVE-2024-38421
CVE-2024-38423
CVE-2024-38424
CVE-2024-39343
CVE-2024-39890
CVE-2024-40671
CVE-2024-43047
CVE-2024-43096
CVE-2024-43097
CVE-2024-43762
CVE-2024-43763
CVE-2024-43764
CVE-2024-43766
CVE-2024-43767
CVE-2024-43768
CVE-2024-43769
CVE-2024-43770
CVE-2024-43771
CVE-2024-45183
CVE-2024-46740
CVE-2024-49410
CVE-2024-49411
CVE-2024-49412
CVE-2024-49413
CVE-2024-49414
CVE-2024-49415
CVE-2024-49747
CVE-2024-49748
CVE-2024-53921