Samsung Galaxy i9305 Firmware vulnerabilities

3 CVEs affecting Samsung Galaxy i9305 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-26146, published 2021-05-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-26146, published 2021-05-11. Medium severity, CVSS 5.3. EPSS: 5.6% chance of exploitation in the next 30 days. An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fragments with non-consecutive packet numbers. An adversary can abuse this to…
CVE-2020-26144, published 2021-05-11. Medium severity, CVSS 6.5. EPSS: 4.9% chance of exploitation in the next 30 days. An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid…
CVE-2020-26145, published 2021-05-11. Medium severity, CVSS 6.5. EPSS: 3.5% chance of exploitation in the next 30 days. An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast fragments even when sent in plaintext and…