CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
Percentile
31.5%
Improper input validation in librtp.so prior to SMR Aug-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.
Vendor | Product | Version | CPE |
---|---|---|---|
samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:* |
samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:* |
samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:* |
samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-apr-2024-r1:*:*:*:*:*:* |
samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:* |
samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:* |
samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:* |
samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:* |
samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-dec-2023-r1:*:*:*:*:*:* |
samsung | android | 12.0 | cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:* |