Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Galaxy_s4_firmware
(Samsung)Repositories |
Unknown: This might be proprietary software. |
#Vulnerabilities | 8 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2019-06-06 | CVE-2019-12762 | Xiaomi Mi 5s Plus devices allow attackers to trigger touchscreen anomalies via a radio signal between 198 kHz and 203 kHz, as demonstrated by a transmitter and antenna hidden just beneath the surface of a coffee-shop table, aka Ghost Touch. | Arrows_nx_f05\-F_firmware, Nexus_7_firmware, Nexus_9_firmware, Mi_5s_plus_firmware, Galaxy_s4_firmware, Galaxy_s6_edge_firmware, Aquos_zeta_sh\-04f_firmware, Xperia_z4_firmware | 4.2 | ||
2019-12-27 | CVE-2013-4764 | Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbitrary destinations without permission. | Galaxy_s3_firmware, Galaxy_s4_firmware | N/A | ||
2019-12-27 | CVE-2013-4763 | Samsung Galaxy S3/S4 exposes an unprotected component allowing arbitrary SMS text messages without requesting permission. | Galaxy_s3_firmware, Galaxy_s4_firmware | N/A | ||
2017-04-13 | CVE-2016-4032 | Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices do not block AT+USBDEBUG and AT+WIFIVALUE, which allows attackers to modify Android settings by leveraging AT access, aka SVE-2016-5301. | Galaxy_note_3_firmware, Galaxy_s4_firmware, Galaxy_s4_mini_firmware, Galaxy_s4_mini_lte_firmware, Galaxy_s6_firmware | 4.6 | ||
2017-04-13 | CVE-2016-4031 | Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices allow attackers to send AT commands by plugging the device into a Linux host, aka SVE-2016-5301. | Galaxy_note_3_firmware, Galaxy_s4_firmware, Galaxy_s4_mini_firmware, Galaxy_s4_mini_lte_firmware, Galaxy_s6_firmware | 6.8 | ||
2017-04-13 | CVE-2016-4030 | Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices have unintended availability of the modem in USB configuration number 2 within the secure lockscreen state, allowing an attacker to make phone calls, send text messages, or issue commands, aka SVE-2016-5301. | Galaxy_note_3_firmware, Galaxy_s4_firmware, Galaxy_s4_mini_firmware, Galaxy_s4_mini_lte_firmware, Galaxy_s6_firmware | 6.8 | ||
2017-08-24 | CVE-2015-1801 | The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers to cause a denial of service (memory corruption) or gain privileges. | Galaxy_s4_firmware | 9.8 | ||
2017-08-24 | CVE-2015-1800 | The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers to potentially obtain sensitive information. | Galaxy_s4_firmware | 7.5 |