CVE-2021-25437
Published Jul 8, 2021Improper access control vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows attackers to arbitrary code execution by replacing FOTA update file.
Vendor/product archive
linux / tizen CVEs
Beta · best-effort13 CVEs tagged to linux / tizen — 4 Critical, 4 High, 5 Medium, 0 Low, 0 Unrated.
CVE-2021-25436
Published Jul 8, 2021Improper input validation vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows arbitrary code execution via Samsung Accessory Protocol.
CVE-2021-25435
Published Jul 8, 2021Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execution using recovery partition in wireless firmware…
CVE-2021-25434
Published Jul 8, 2021Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execution using param partition in wireless firmware do…
CVE-2021-25433
Published Jul 8, 2021Improper authorization vulnerability in Tizen factory reset policy prior to Firmware update JUL-2021 Release allows untrusted applications to perform factory reset using dbus sign…
CVE-2018-16268
Published Jan 22, 2020The SoundServer/FocusServer system services in Tizen allow an unprivileged process to perform media-related system actions, due to improper D-Bus security policy configurations. S…
CVE-2018-16267
Published Jan 22, 2020The system-popup system service in Tizen allows an unprivileged process to perform popup-related system actions, due to improper D-Bus security policy configurations. Such actions…
CVE-2018-16266
Published Jan 22, 2020The Enlightenment system service in Tizen allows an unprivileged process to fully control or capture windows, due to improper D-Bus security policy configurations. This affects Ti…
CVE-2018-16265
Published Jan 22, 2020The bt/bt_core system service in Tizen allows an unprivileged process to create a system user interface and control the Bluetooth pairing process, due to improper D-Bus security p…
CVE-2018-16264
Published Jan 22, 2020The BlueZ system service in Tizen allows an unprivileged process to partially control Bluetooth or acquire sensitive information, due to improper D-Bus security policy configurati…
CVE-2018-16263
Published Jan 22, 2020The PulseAudio system service in Tizen allows an unprivileged process to control its A2DP MediaEndpoint, due to improper D-Bus security policy configurations. This affects Tizen b…
CVE-2018-16262
Published Jan 22, 2020The pkgmgr system service in Tizen allows an unprivileged process to perform package management actions, due to improper D-Bus security policy configurations. Such actions include…
CVE-2012-6459
Published Jan 1, 2013ConnMan 1.3 on Tizen continues to list the bluetooth service after offline mode has been enabled, which might allow remote attackers to obtain sensitive information via Bluetooth…
Showing 1-13 of 13 CVEsPage 1 of 1