Dawuge

An application may be able to access sensitive user data due to insufficient checks.

A permissions issue exists due to insufficient validation, which could allow a local attacker to overwrite restricted files.

Improper input validation allows local attackers to access arbitrary URLs and launch arbitrary activities using Samsung Members privileges.

A flaw exists due to the improper export of Android application components within Secure Folder. This allows local attackers to launch arbitrary activity with Secure Folder privileges.

A flaw exists in Samsung Cloud that involves improper handling of insufficient permissions. This allows local attackers to access specific files in arbitrary paths.

An out-of-bounds write issue exists during the pre-processing of JPEG decoding. This can lead to memory corruption for local attackers. The issue is present in libpadm.so prior to SMR Oct-2025 Release 1.

An out-of-bounds read issue exists in the parsing header for JPEG decoding. This can allow a local attacker to potentially access memory outside of the intended boundaries. The issue is present in libpadm.so prior to SMR Oct-2025 Release 1.

An out-of-bounds write exists in the parsing header for JPEG decoding. This issue can lead to memory corruption for local attackers. The vulnerable component is `libpadm.so`.

An out-of-bounds write issue exists in the JPEG decoding pre-processing within libpadm.so. This allows a local attacker to write to memory outside of allocated boundaries. The issue is present in versions of libpadm.so prior to SMR Oct-2025 Release 1.

An out-of-bounds write issue exists in the fingerprint trustlet. This allows a locally privileged attacker to write to memory outside of allocated boundaries.

An application may be able to access sensitive user data due to insufficient checks preventing unauthorized actions.

A type confusion issue was addressed with improved memory handling. This issue may allow an app to cause a denial-of-service.

A type confusion issue was addressed with improved memory handling. This issue may allow an app to cause a denial-of-service.

An out-of-bounds write issue exists in the detaching crypto box functionality of Blockchain Keystore. This flaw allows local privileged attackers to write data beyond allocated memory boundaries.

An out-of-bounds read issue exists in Blockchain Keystore. This allows local privileged attackers to read out-of-bounds memory.

Improper access control in PkgPredictorService prior to SMR Aug-2025 Release 1 allows local attackers to use privileged APIs.

An out-of-bounds write issue exists in the creation of bitmap images. This can allow a local privileged attacker to write to memory outside of allocated boundaries.

An out-of-bounds write issue exists in the drawing pinpad functionality of Blockchain Keystore. This allows local privileged attackers to write to memory outside of allocated boundaries.

A permissions issue was addressed with additional restrictions. An app may be able to fingerprint the user.

The issue was addressed with improved memory handling. An app may be able to cause a denial-of-service.