Samsung – Kettinki

2023-03-17 @ 15.51.18 ∈ In English

Multiple Internet to Baseband Remote Code Execution Vulnerabilities in Exynos Modems

The four most severe of these eighteen vulnerabilities (CVE-2023-24033 and three other vulnerabilities that have yet to be assigned CVE-IDs) allowed for Internet-to-baseband remote code execution.

2022-04-06 @ 12.46.12 ∈ In English

Start Arbitrary Activity App Affecting Samsung Android Devices

The vulnerability allows any local app on the device (including third-party apps with zero permissions) to provide arbitrary Intent objects that will be used by a pre-installed app (com.android.server.telecom) executing as the system user to start an activity app component (even those that are not exported) of the attacker’s choosing, affecting Android versions 10, 11, and 12.

2019-01-14 @ 18.46.00 ∈ In English

Don’t kill my app!

To squeeze a little extra battery out of your phone, Android device vendors listed below (with their bad vendor score) cripple apps and make them useless.