Donghun Seo

Name of the Vulnerable Software and Affected Versions: Tizen bootloader versions prior to Firmware update JUL-2021 Release Description: The issue is related to improper input validation in the Tizen bootloader, which allows for arbitrary code execution using the recovery partition when the device is in wireless firmware download mode. Recommendations: For versions prior to Firmware update JUL-2021 Release, update to the Firmware update JUL-2021 Release or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Tizen FOTA service versions prior to Firmware update JUL-2021 Release Description: The issue is related to improper input validation in the Tizen FOTA service, which allows for arbitrary code execution via the Samsung Accessory Protocol. Recommendations: For versions prior to Firmware update JUL-2021 Release, update to the JUL-2021 Release or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Tizen FOTA service versions prior to Firmware update JUL-2021 Release Description: The issue is related to improper access control in the Tizen FOTA service, allowing attackers to execute arbitrary code by replacing the FOTA update file. Recommendations: For versions prior to Firmware update JUL-2021 Release, update to the JUL-2021 Release or later to resolve the issue.