CVE Vulnerability Advisory Database

[Affected Scope] Samsung mobile devices and Exynos modem interface drivers prior to SMR Oct-2021 Release 1

[Impact] Local attackers can execute arbitrary code with kernel privileges by dereferencing an invalid function pointer, leading to complete system compromise

[Mitigation] Immediately apply the official Samsung Android security update (October 2021 or later)

[Affected Scope] Apple iOS and iPadOS devices running versions prior to 14.8.1 or 15.1

[Impact] A malicious local application can exploit this vulnerability to execute arbitrary code with kernel privileges, leading to complete device compromise

[Mitigation] Immediately update affected devices to iOS/iPadOS 14.8.1, 15.1, or later versions

[Affected Scope] Linux Kernel versions since v2.6.19-rc1 that lack the official security patch, particularly environments with user namespaces enabled

[Impact] A local attacker can trigger heap memory corruption to escalate privileges to root or cause a system-wide Denial of Service (DoS)

[Mitigation] Upgrade the Linux kernel to the latest stable release, or apply temporary workarounds to restrict unprivileged user namespace creation

[Affected Scope] Samsung mobile devices running firmware versions prior to SMR (Security Maintenance Release) MAY-2021 Release 1

[Impact] Local attackers with compromised radio privileges can bypass signature checks via a race condition, leading to arbitrary code execution in the kernel context

[Mitigation] Apply the official Samsung security update (SMR MAY-2021 Release 1 or later) immediately and restrict unauthorized application installation

[Affected Scope] Samsung mobile devices running firmware versions prior to SMR (Samsung Security Maintenance Release) MAY-2021 Release 1.

[Impact] A local attacker with compromised radio privileges can trigger a race condition to perform an arbitrary write in kernel memory, leading to local privilege escalation (LPE).

[Mitigation] Apply the official Samsung security update (SMR MAY-2021 Release 1 or later) and restrict unauthorized local application execution.

[Affected Scope] ARM Mali GPU kernel driver Bifrost (r16p0 through r29p0), Valhall (r19p0 through r29p0), and Midgard (r28p0 through r30p0)

[Impact] An unprivileged local attacker can exploit a Use-After-Free (UAF) condition to access freed memory, leading to sensitive information disclosure or root privilege escalation

[Mitigation] Apply the official security patches from chipset vendors and OEMs, upgrading the Mali GPU kernel driver to version r30p0 or higher

[Affected Scope] Ubuntu Linux kernel versions with unprivileged user namespaces and OverlayFS mounting enabled

[Impact] A local unprivileged attacker can exploit improper file capability validation to gain full root privileges on the host

[Mitigation] Upgrade to the latest patched Ubuntu kernel and reboot, or temporarily disable unprivileged user namespaces

[Affected Scope] Samsung mobile devices with DSP (Digital Signal Processor) driver prior to SMR Mar-2021 Release 1

[Impact] Local attackers can exploit improper boundary checks to gain out-of-bounds memory access, leading to local privilege escalation and arbitrary code execution in kernel space

[Mitigation] Apply the official Samsung security update to SMR Mar-2021 Release 1 or later

[Affected Scope] Samsung devices equipped with DSP (Digital Signal Processor) driver prior to SMR (Security Maintenance Release) Mar-2021 Release 1

[Impact] A local attacker with high privileges can load arbitrary ELF libraries inside the DSP subsystem, potentially leading to complete system compromise and evasion of OS-level security controls

[Mitigation] Immediately apply the official Samsung security update (SMR Mar-2021 Release 1 or later)

[Affected Scope] Samsung mobile devices with DPU (Display Processing Unit) driver prior to SMR (Samsung Maintenance Release) Mar-2021 Release 1

[Impact] A local attacker with high privileges can trigger improper file descriptor handling, leading to kernel memory corruption and system-wide kernel panic (DoS/LPE)

[Mitigation] Immediately apply the official Samsung Android security update (SMR March 2021 Release 1 or later)

[Affected Scope] Samsung Android devices prior to SMR (Samsung Maintenance Release) March 2021 Release 1

[Impact] Local attackers can bypass critical kernel protections like KASLR by reading sensitive kernel memory addresses and structures from the improperly secured sec_log file

[Mitigation] Apply the official Samsung SMR March 2021 Release 1 (or later) firmware update immediately, or restrict access permissions to the debug log node

[Affected Scope] Samsung mobile devices running software versions prior to SMR (Samsung Security Maintenance Release) Mar-2021 Release 1

[Impact] Untrusted local applications can bypass sandbox boundaries to read or write sensitive local files, potentially leading to data theft or privilege escalation

[Mitigation] Immediately apply the official Samsung security update (SMR Mar-2021 Release 1 or later)

[Affected Scope] Veritas Backup Exec versions prior to 21.2 (Remote Agent)

[Impact] Attackers can bypass authentication via flaws in the SHA authentication scheme and execute arbitrary commands with SYSTEM privileges

[Mitigation] Immediately upgrade Veritas Backup Exec to version 21.2 or later, and restrict external access to the NDMP port (TCP 10000)

[Affected Scope] Veritas Backup Exec Agent versions prior to 21.2 (Windows/Linux)

[Impact] Remote attackers can bypass authentication to gain unauthorized access to the Agent and execute privileged commands with SYSTEM/root privileges

[Mitigation] Immediately upgrade Veritas Backup Exec to version 21.2 or later, or restrict network access to the Agent port (default TCP 10000)

[Affected Scope] Veritas Backup Exec Remote Agent installed on Windows and Linux systems prior to version 21.2

[Impact] Attackers can bypass authentication via flaws in the SHA Authentication scheme, gaining unauthorized access to execute data management commands with System privileges, leading to arbitrary file access and remote code execution

[Mitigation] Immediately upgrade Veritas Backup Exec to version 21.2 or later, and restrict network access to the NDMP port (TCP 10000)

[Affected Scope] Apple iOS and iPadOS versions prior to 13.6, and macOS Catalina versions prior to 10.15.6

[Impact] A local attacker can exploit improper validation of environment variables to bypass security boundaries and view sensitive user information

[Mitigation] Immediately update affected devices to iOS/iPadOS 13.6, macOS Catalina 10.15.6, or later versions

[Affected Scope] Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier

[Impact] Successful exploitation of this Use-After-Free vulnerability allows remote attackers to execute arbitrary code in the context of the current user by tricking them into opening a specially crafted PDF file

[Mitigation] Immediately apply the official Adobe security patch (APSB20-48) and restrict opening PDF files from untrusted sources

[Affected Scope] Cisco AnyConnect Secure Mobility Client for Windows versions prior to 4.9.03015

[Impact] An authenticated local attacker can exploit the IPC channel to load a malicious DLL, leading to arbitrary code execution with NT AUTHORITY\SYSTEM privileges.

[Mitigation] Immediately upgrade all affected Windows endpoints to Cisco AnyConnect Secure Mobility Client version 4.9.03015 or later.

[Affected Scope] Cisco AnyConnect Secure Mobility Client for Windows versions 4.8.01090 and prior

[Impact] An authenticated local attacker can copy arbitrary malicious DLL files to system-level directories, leading to arbitrary code execution with SYSTEM privileges

[Mitigation] Immediately upgrade to the patched official release (version 4.8.02042 or later)

[Affected Scope] All Apple Mac systems running macOS Mojave versions prior to 10.14.4

[Impact] A local attacker can execute a malicious application to gain elevated kernel privileges and fully compromise the system

[Mitigation] Immediately apply the official operating system security update to macOS Mojave 10.14.4 or later