GCVE - cpe:2.3:o:linux:tizen:4.0:m3:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:linux:tizen:4.0:m3:*:*:*:*:*:*

part: o version: 4.0 update: m3

Vendor	Linux (`f4ceb328-5d50-5b0b-a2e1-fa3f16dc0244`)
Product	Tizen (`90b63995-57b6-56cf-82b2-46b0285059fe`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-16268`	vulnerable	2026-06-03 14:38:20.246200	Details available The SoundServer/FocusServer system services in Tizen allow an unprivileged process to perform media-related system actions, due to improper D-Bus security policy configurations. Such actions include playing an arbitrary sound file or DTMF tones. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2. Published: 2020-01-22T12:51:16.000Z Updated: 2024-08-05T10:17:38.384Z Open on db.gcve.eu Reference links https://media.defcon.org/DEF%20CON%2026/DEF%20CON%2026%20presentations/Dongsung%20Kim%20and%20Hyoung%20Kee%20Choi%20-%20Updated/DEFCON-26-Dongsung-Kim-and-Hyoung-Kee-Choi-Your-Watch-Can-Watch-You-Updated.pdf https://review.tizen.org/git/?p=platform/core/multimedia/libmm-sound.git%3Ba=commit%3Bh=7fce6f2d6d480b3bd0e84a5ba3f72173a37e36db https://www.youtube.com/watch?v=3IdgBwbOT-g&feature=youtu.be	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16267`	vulnerable	2026-06-03 14:38:20.245479	Details available The system-popup system service in Tizen allows an unprivileged process to perform popup-related system actions, due to improper D-Bus security policy configurations. Such actions include the triggering system poweroff menu, and prompting a popup with arbitrary strings. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2. Published: 2020-01-22T12:49:24.000Z Updated: 2024-08-05T10:17:38.406Z Open on db.gcve.eu Reference links https://media.defcon.org/DEF%20CON%2026/DEF%20CON%2026%20presentations/Dongsung%20Kim%20and%20Hyoung%20Kee%20Choi%20-%20Updated/DEFCON-26-Dongsung-Kim-and-Hyoung-Kee-Choi-Your-Watch-Can-Watch-You-Updated.pdf https://review.tizen.org/git/?p=platform/core/system/system-popup.git%3Ba=commit%3Bh=57b3c2f3cd61c6f432e7abe3a2d8b0df72fd4b0e https://www.youtube.com/watch?v=3IdgBwbOT-g&feature=youtu.be	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16266`	vulnerable	2026-06-03 14:38:20.244813	Details available The Enlightenment system service in Tizen allows an unprivileged process to fully control or capture windows, due to improper D-Bus security policy configurations. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2. Published: 2020-01-22T12:15:27.000Z Updated: 2024-08-05T10:17:38.354Z Open on db.gcve.eu Reference links https://media.defcon.org/DEF%20CON%2026/DEF%20CON%2026%20presentations/Dongsung%20Kim%20and%20Hyoung%20Kee%20Choi%20-%20Updated/DEFCON-26-Dongsung-Kim-and-Hyoung-Kee-Choi-Your-Watch-Can-Watch-You-Updated.pdf https://review.tizen.org/git/?p=platform/upstream/enlightenment.git%3Ba=commit%3Bh=8ff5c24d04f97b1c84b463535876600b22128fb4 https://www.youtube.com/watch?v=3IdgBwbOT-g&feature=youtu.be	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16265`	vulnerable	2026-06-03 14:38:20.244139	Details available The bt/bt_core system service in Tizen allows an unprivileged process to create a system user interface and control the Bluetooth pairing process, due to improper D-Bus security policy configurations. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2. Published: 2020-01-22T12:45:43.000Z Updated: 2024-08-05T10:17:38.375Z Open on db.gcve.eu Reference links https://media.defcon.org/DEF%20CON%2026/DEF%20CON%2026%20presentations/Dongsung%20Kim%20and%20Hyoung%20Kee%20Choi%20-%20Updated/DEFCON-26-Dongsung-Kim-and-Hyoung-Kee-Choi-Your-Watch-Can-Watch-You-Updated.pdf https://review.tizen.org/git/?p=platform/core/connectivity/bluetooth-frwk.git%3Ba=commit%3Bh=074dfc9709d8cee84564fc815796b0ef0c3273f5 https://review.tizen.org/git/?p=platform/core/connectivity/bluetooth-frwk.git%3Ba=commit%3Bh=bafbd66906ae5712874dc0d7dd6288d2c1ae4db2 https://www.youtube.com/watch?v=3IdgBwbOT-g&feature=youtu.be	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16264`	vulnerable	2026-06-03 14:38:20.243448	Details available The BlueZ system service in Tizen allows an unprivileged process to partially control Bluetooth or acquire sensitive information, due to improper D-Bus security policy configurations. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2. Published: 2020-01-22T12:42:59.000Z Updated: 2024-08-05T10:17:38.341Z Open on db.gcve.eu Reference links https://media.defcon.org/DEF%20CON%2026/DEF%20CON%2026%20presentations/Dongsung%20Kim%20and%20Hyoung%20Kee%20Choi%20-%20Updated/DEFCON-26-Dongsung-Kim-and-Hyoung-Kee-Choi-Your-Watch-Can-Watch-You-Updated.pdf https://review.tizen.org/git/?p=platform/upstream/bluez.git%3Ba=commit%3Bh=ff9878c95efc12d4a4495153ab51e3a09f8d3c01 https://www.youtube.com/watch?v=3IdgBwbOT-g&feature=youtu.be	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16263`	vulnerable	2026-06-03 14:38:20.242609	Details available The PulseAudio system service in Tizen allows an unprivileged process to control its A2DP MediaEndpoint, due to improper D-Bus security policy configurations. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2. Published: 2020-01-22T12:41:08.000Z Updated: 2024-08-05T10:17:38.408Z Open on db.gcve.eu Reference links https://media.defcon.org/DEF%20CON%2026/DEF%20CON%2026%20presentations/Dongsung%20Kim%20and%20Hyoung%20Kee%20Choi%20-%20Updated/DEFCON-26-Dongsung-Kim-and-Hyoung-Kee-Choi-Your-Watch-Can-Watch-You-Updated.pdf https://review.tizen.org/git/?p=platform/upstream/pulseaudio.git%3Ba=commit%3Bh=81e8ba9f3ab0917da4fdfa094f49333be57964c6 https://www.youtube.com/watch?v=3IdgBwbOT-g&feature=youtu.be	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16262`	vulnerable	2026-06-03 14:38:20.240562	Details available The pkgmgr system service in Tizen allows an unprivileged process to perform package management actions, due to improper D-Bus security policy configurations. Such actions include installing, decrypting, and killing other packages. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2. Published: 2020-01-22T12:20:33.000Z Updated: 2024-08-05T10:17:38.427Z Open on db.gcve.eu Reference links https://review.tizen.org/git/?p=platform/core/appfw/pkgmgr-server.git%3Ba=commit%3Bh=aac8a95859828a058d8e06893982b11ebc81dd78 https://media.defcon.org/DEF%20CON%2026/DEF%20CON%2026%20presentations/Dongsung%20Kim%20and%20Hyoung%20Kee%20Choi%20-%20Updated/DEFCON-26-Dongsung-Kim-and-Hyoung-Kee-Choi-Your-Watch-Can-Watch-You-Updated.pdf https://www.youtube.com/watch?v=3IdgBwbOT-g&feature=youtu.be	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.