Samsung Mobile Samsung Mobile Devices
866 vulnérabilités publiées citent ce produit. Les 200 plus récentes sont listées.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-21126 | | Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-21125 | | Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to p | HIGH 8.6 | 0.1 % | ||
| CVE-2026-21124 | | Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers | HIGH 8.6 | 0.1 % | ||
| CVE-2026-21123 | | Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to acces | MEDIUM 6.7 | 0.1 % | ||
| CVE-2026-21122 | | Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code. | HIGH 7.0 | 0.1 % | ||
| CVE-2026-21121 | | Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs. | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-21120 | | Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privi | HIGH 8.9 | 0.1 % | ||
| CVE-2026-21119 | | Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-o | MEDIUM 4.8 | 0.1 % | ||
| CVE-2026-21118 | | Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage. | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-21117 | | Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information. | MEDIUM 5.1 | 0.1 % | ||
| CVE-2026-21116 | | Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory. | MEDIUM 5.1 | 0.1 % | ||
| CVE-2026-21115 | | Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory. | MEDIUM 5.1 | 0.1 % | ||
| CVE-2026-21114 | | Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code. | HIGH 7.0 | 0.1 % | ||
| CVE-2026-21140 | | Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications. | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-21104 | | Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code | HIGH 7.1 | 0.1 % | ||
| CVE-2026-21103 | | Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege. | MEDIUM 6.8 | 0.2 % | ||
| CVE-2026-21102 | | Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege. | CRITICAL 9.3 | 0.2 % | ||
| CVE-2026-21101 | | Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitra | HIGH 8.4 | 0.2 % | ||
| CVE-2026-21100 | | Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity. | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-21099 | | Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information. | MEDIUM 5.1 | 0.1 % | ||
| CVE-2026-21098 | | Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC with | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-21097 | | Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary | MEDIUM 4.6 | 0.2 % | ||
| CVE-2026-21096 | | Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbi | CRITICAL 9.2 | 0.8 % | ||
| CVE-2026-21095 | | Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbit | CRITICAL 9.2 | 0.8 % | ||
| CVE-2026-21094 | | Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory. | MEDIUM 6.1 | 0.3 % | ||
| CVE-2026-21093 | | Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memor | MEDIUM 5.6 | 0.1 % | ||
| CVE-2026-21092 | | Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege. | HIGH 8.8 | 0.5 % | ||
| CVE-2026-21091 | | Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory. | MEDIUM 4.8 | 0.2 % | ||
| CVE-2026-21090 | | Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory. | MEDIUM 4.8 | 0.2 % | ||
| CVE-2026-21089 | | Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of | MEDIUM 6.9 | 0.2 % | ||
| CVE-2026-21088 | | Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write | MEDIUM 6.9 | 0.2 % | ||
| CVE-2026-21087 | | Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privi | HIGH 8.6 | 0.2 % | ||
| CVE-2026-21086 | | Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to access proxy configuration. | MEDIUM 4.8 | 0.1 % | ||
| CVE-2026-21085 | | Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory. | HIGH 8.4 | 0.2 % | ||
| CVE-2026-21073 | | Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity. | MEDIUM 5.2 | 0.2 % | ||
| CVE-2026-21072 | | Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory. | MEDIUM 5.1 | 0.2 % | ||
| CVE-2026-21071 | | Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memor | MEDIUM 5.1 | 0.2 % | ||
| CVE-2026-21070 | | Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information. | MEDIUM 5.1 | 0.2 % | ||
| CVE-2026-21069 | | Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out- | MEDIUM 5.1 | 0.2 % | ||
| CVE-2026-21068 | | Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code. | HIGH 8.4 | 0.2 % | ||
| CVE-2026-21067 | | Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory. | MEDIUM 5.1 | 0.2 % | ||
| CVE-2026-21066 | | Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory. | MEDIUM 5.1 | 0.2 % | ||
| CVE-2026-21065 | | Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory. | MEDIUM 4.8 | 0.2 % | ||
| CVE-2026-21064 | | Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability. | HIGH 7.0 | 0.1 % | ||
| CVE-2026-21063 | | Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock fu | MEDIUM 6.8 | 0.2 % | ||
| CVE-2026-21062 | | Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data. | MEDIUM 4.8 | 0.1 % | ||
| CVE-2026-21061 | | Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User in | MEDIUM 6.0 | 0.4 % | ||
| CVE-2026-21060 | | Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user | MEDIUM 6.7 | 0.2 % | ||
| CVE-2026-21059 | | Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-21058 | | Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' p | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-21047 | | Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to potentially execute arbitrary code. | HIGH 8.3 | 0.7 % | ||
| CVE-2026-21052 | | Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system privileg | MEDIUM 6.8 | 0.2 % | ||
| CVE-2026-21051 | | Incorrect default permissions in WLAN security prior to SMR Jul-2026 Release 1 allows local attackers to configure TencentWifiSecurity setti | MEDIUM 5.1 | 0.2 % | ||
| CVE-2026-21050 | | Improper access control in SmartThingsKit prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information. | MEDIUM 5.1 | 0.2 % | ||
| CVE-2026-21049 | | Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary code. | HIGH 8.4 | 0.2 % | ||
| CVE-2026-21048 | | Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write o | HIGH 8.4 | 0.5 % | ||
| CVE-2026-21046 | | Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR Jul-2026 Release 1 allows local privileged attackers to ex | HIGH 8.4 | 0.1 % | ||
| CVE-2026-21045 | | Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write | HIGH 8.4 | 0.5 % | ||
| CVE-2026-21044 | | Improper authorization in KnoxGuardManager prior to SMR Jul-2026 Release 1 allows local attackers to bypass the persistence configuration of | MEDIUM 5.8 | 0.1 % | ||
| CVE-2026-21043 | | Path traversal in Wallpaper service prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system server pri | MEDIUM 6.7 | 0.2 % | ||
| CVE-2026-21042 | | Out-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows remote attackers to execute arbitrary code. | HIGH 8.7 | 0.6 % | ||
| CVE-2026-21041 | | Improper access control in SamsungSEAgentService prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information. | MEDIUM 6.9 | 0.2 % | ||
| CVE-2026-21040 | | Improper access control in IAFDService prior to SMR Jul-2026 Release 1 allows local privileged attackers to use the privileged APIs. | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-21039 | | Improper access control in Settings prior to SMR Jul-2026 Release 1 allows local attackers to configure Theft protection settings. | MEDIUM 6.9 | 0.2 % | ||
| CVE-2026-21031 | | Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. User interaction is r | MEDIUM 5.2 | 0.1 % | ||
| CVE-2026-21030 | | Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger privileged functions. | MEDIUM 6.4 | 0.1 % | ||
| CVE-2026-21029 | | Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 allows local attacker to execute | MEDIUM 6.8 | 0.1 % | ||
| CVE-2026-21028 | | Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information. | MEDIUM 5.1 | 0.1 % | ||
| CVE-2026-21027 | | Improper export of android application components in ImsSettings prior to SMR Jun-2026 Release 1 allows local attackers to trigger logging f | MEDIUM 4.8 | 0.1 % | ||
| CVE-2026-21026 | | Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attackers to access to sen | MEDIUM 6.4 | 0.1 % | ||
| CVE-2026-21025 | | Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information. | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-21017 | | Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attackers to access privil | MEDIUM 4.6 | 0.1 % | ||
| CVE-2026-21022 | | Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release 1 allows local attackers to access sensitive informa | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-21021 | | Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity. | MEDIUM 5.1 | 0.2 % | ||
| CVE-2026-21020 | | Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers to trigger privileged func | MEDIUM 5.1 | 0.1 % | ||
| CVE-2026-21019 | | Improper input validation in FacAtFunction in Galaxy Watch prior to SMR May-2026 Release 1 allows local attacker to execute arbitrary code w | HIGH 8.9 | 0.2 % | ||
| CVE-2026-21018 | | Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary code. | MEDIUM 6.8 | 0.2 % | ||
| CVE-2026-21016 | | Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows local attackers to access sensitive information. | MEDIUM 5.1 | 0.1 % | ||
| CVE-2026-21015 | | Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local attacker to access unique identifier. | MEDIUM 6.8 | 0.1 % | ||
| CVE-2026-21023 | | Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-21010 | | Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions. | HIGH 7.8 | 0.1 % | ||
| CVE-2026-21008 | | Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitive information. | MEDIUM 5.1 | 0.2 % | ||
| CVE-2026-21012 | | External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged local attacker to create file with system priv | MEDIUM 6.8 | 0.1 % | ||
| CVE-2026-21011 | | Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend U | MEDIUM 5.4 | 0.1 % | ||
| CVE-2026-21009 | | Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass App Pinning. | MEDIUM 4.1 | 0.2 % | ||
| CVE-2026-21007 | | Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Knox Guard. | MEDIUM 4.4 | 0.2 % | ||
| CVE-2026-21006 | | Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents. | MEDIUM 4.7 | 0.1 % | ||
| CVE-2026-21003 | | Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the re | MEDIUM 5.2 | 0.2 % | ||
| CVE-2026-20992 | | Improper authorization in Settings prior to SMR Mar-2026 Release 1 allows local attacker to disable configuring the background data usage of | MEDIUM 4.8 | 0.1 % | ||
| CVE-2026-20991 | | Improper privilege management in ThemeManager prior to SMR Mar-2026 Release 1 allows local privileged attackers to reuse trial contents. | MEDIUM 6.7 | 0.1 % | ||
| CVE-2026-20990 | | Improper export of android application components in Secure Folder prior to SMR Mar-2026 Release 1 allows local attackers to launch arbitrar | HIGH 8.4 | 0.2 % | ||
| CVE-2026-20989 | | Improper verification of cryptographic signature in Font Settings prior to SMR Mar-2026 Release 1 allows physical attackers to use custom fo | MEDIUM 5.1 | 0.1 % | ||
| CVE-2026-20988 | | Improper verification of intent by broadcast receiver in Settings prior to SMR Mar-2026 Release 1 allows local attacker to launch arbitrary | MEDIUM 6.8 | 0.1 % | ||
| CVE-2026-20983 | | Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitra | HIGH 8.4 | 0.1 % | ||
| CVE-2026-20982 | | Path traversal in ShortcutService prior to SMR Feb-2026 Release 1 allows privileged local attacker to create file with system privilege. | MEDIUM 6.8 | 0.3 % | ||
| CVE-2026-20981 | | Improper input validation in FacAtFunction prior to SMR Feb-2026 Release 1 allows privileged physical attacker to execute arbitrary command | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-20980 | | Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker to execute arbitrary commands. | HIGH 7.0 | 0.3 % | ||
| CVE-2026-20979 | | Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Settings | HIGH 8.4 | 0.1 % | ||
| CVE-2026-20978 | | Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local attackers to bypass the persistence configuration of | MEDIUM 5.8 | 0.1 % | ||
| CVE-2026-20977 | | Improper access control in Emergency Sharing prior to SMR Feb-2026 Release 1 allows local attackers to interrupt its functioning. | MEDIUM 6.9 | 0.1 % | ||
| CVE-2026-20974 | | Improper input validation in data related to network restrictions prior to SMR Jan-2026 Release 1 allows physical attackers to bypass Carrie | MEDIUM 5.2 | 0.2 % | ||
| CVE-2026-20973 | | Out-of-bounds read in libimagecodec.quram.so prior to SMR Jan-2026 Release 1 allows remote attacker to access out-of-bounds memory. | CRITICAL 9.1 | 0.5 % | ||
| CVE-2026-20972 | | Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026 Release 1 allows local attackers to enable UWB. | MEDIUM 4.8 | 0.1 % | ||
| CVE-2026-20971 | | Use After Free in PROCA driver prior to SMR Jan-2026 Release 1 allows local attackers to potentially execute arbitrary code. | HIGH 7.3 | 0.2 % | ||
| CVE-2026-20970 | | Improper access control in SLocation prior to SMR Jan-2026 Release 1 allows local attackers to execute the privileged APIs. | MEDIUM 6.8 | 0.1 % | ||
| CVE-2026-20969 | | Improper input validation in SecSettings prior to SMR Jan-2026 Release 1 allows local attacker to access file with system privilege. User in | LOW 2.3 | 0.3 % | ||
| CVE-2026-20968 | | Use after free in DualDAR prior to SMR Jan-2026 Release 1 allows local privileged attackers to execute arbitrary code. | MEDIUM 6.7 | 0.2 % | ||
| CVE-2025-58480 | | Heap-based buffer overflow in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory. | HIGH 7.5 | 0.3 % | ||
| CVE-2025-58479 | | Out-of-bounds read in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory. | HIGH 7.5 | 0.3 % | ||
| CVE-2025-58478 | | Out-of-bounds write in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory. | HIGH 7.5 | 0.3 % | ||
| CVE-2025-58477 | | Out-of-bounds write in parsing IFD tag in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bo | MEDIUM 6.5 | 0.3 % | ||
| CVE-2025-58476 | | Out-of-bounds read vulnerability in bootloader prior to SMR Dec-2025 Release 1 allows physical attackers to access out-of-bounds memory. | MEDIUM 4.6 | 0.1 % | ||
| CVE-2025-58475 | | Improper input validation in libsec-ril.so prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory. | MEDIUM 5.6 | 0.1 % | ||
| CVE-2025-21080 | | Improper export of android application components in Dynamic Lockscreen prior to SMR Dec-2025 Release 1 allows local attackers to access fil | HIGH 7.1 | 0.1 % | ||
| CVE-2025-21072 | | Out-of-bounds write in decoding metadata in fingerprint trustlet prior to SMR Dec-2025 Release 1 allows local privileged attackers to write | MEDIUM 5.7 | 0.1 % | ||
| CVE-2025-21075 | | Out-of-bounds write in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory. | HIGH 7.5 | 0.3 % | ||
| CVE-2025-21074 | | Out-of-bounds read in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory. | HIGH 7.5 | 0.3 % | ||
| CVE-2025-21073 | | Insecure default configuration in USB connection mode prior to SMR Nov-2025 Release 1 allows privileged physical attackers to access user da | MEDIUM 6.8 | 0.2 % | ||
| CVE-2025-21071 | | Out-of-bounds write in handling opcode in fingerprint trustlet prior to SMR Nov-2025 Release 1 allows local privileged attackers to write ou | MEDIUM 5.7 | 0.1 % | ||
| CVE-2025-21050 | | Improper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local attackers to access data across multiple user profiles. | HIGH 7.1 | 0.1 % | ||
| CVE-2025-21055 | | Out-of-bounds read and write in libimagecodec.quram.so prior to SMR Oct-2025 Release 1 allows remote attackers to access out-of-bounds memor | HIGH 7.5 | 0.3 % | ||
| CVE-2025-21054 | | Out-of-bounds read in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to potential | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-21053 | | Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause me | HIGH 7.8 | 0.1 % | ||
| CVE-2025-21052 | | Out-of-bounds write under specific condition in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows loc | HIGH 7.8 | 0.1 % | ||
| CVE-2025-21051 | | Out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to write out | HIGH 7.8 | 0.1 % | ||
| CVE-2025-21049 | | Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. User interact | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-21048 | | Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to execute arbitrary code. | HIGH 7.8 | 0.2 % | ||
| CVE-2025-21047 | | Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs. | MEDIUM 6.8 | 0.2 % | ||
| CVE-2025-21046 | | Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to r | LOW 2.4 | 0.2 % | ||
| CVE-2025-21045 | | Insecure storage of sensitive information in Galaxy Watch prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive informa | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-21044 | | Out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write out-of-bounds memory. | MEDIUM 5.7 | 0.1 % | ||
| CVE-2025-21043 | | Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code. | CRITICAL 9.8 | 2.2 % | KEV | |
| CVE-2025-21042 | | Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code. | CRITICAL 9.8 | 36 % | KEV | |
| CVE-2022-39888 | | Improper access control vulnerability in retrieveExternalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows local attacker to access | MEDIUM 4.3 | 0.1 % | ||
| CVE-2025-21034 | | Out-of-bounds write in libsavsvc.so prior to SMR Sep-2025 Release 1 allows local attackers to potentially execute arbitrary code. | HIGH 7.8 | 0.1 % | ||
| CVE-2025-21033 | | Improper access control in ContactProvider prior to SMR Sep-2025 Release 1 allows local attackers to access sensitive information. | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-21032 | | Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditio | MEDIUM 6.8 | 0.2 % | ||
| CVE-2025-21031 | | Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs. | MEDIUM 6.8 | 0.1 % | ||
| CVE-2025-21030 | | Improper handling of insufficient permission in AppPrelaunchManagerService prior to SMR Sep-2025 Release 1 in Chinese Android 15 allows loca | MEDIUM 4.3 | 0.2 % | ||
| CVE-2025-21029 | | Improper handling of insufficient permission in System UI prior to SMR Sep-2025 Release 1 allows local attackers to send arbitrary replies t | MEDIUM 4.0 | 0.1 % | ||
| CVE-2025-21028 | | Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items. | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-21027 | | Improper verification of intent by broadcast receiver in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to temporarily di | MEDIUM 5.1 | 0.1 % | ||
| CVE-2025-21026 | | Improper handling of insufficient permission in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to interrupt the call. | MEDIUM 4.0 | 0.1 % | ||
| CVE-2025-21025 | | Improper access control in MARsExemptionManager prior to SMR Sep-2025 Release 1 allows local attackers to be excluded from background execut | MEDIUM 5.1 | 0.1 % | ||
| CVE-2023-21474 | | Intent redirection vulnerability in SecSettings prior to SMR Apr-2022 Release 1 allows attackers to access arbitrary file with system privil | HIGH 7.1 | 0.1 % | ||
| CVE-2023-21480 | | Improper input validation vulnerability in CertByte prior to SMR Apr-2023 Release 1 allows local attackers to launch privileged activities. | HIGH 8.5 | 0.1 % | ||
| CVE-2023-21479 | | Improper authorization in Smart suggestions prior to SMR Apr-2023 Release 1 in Android 13 and 4.1.01.0 in Android 12 allows remote attackers | MEDIUM 5.3 | 0.4 % | ||
| CVE-2023-21478 | | Improper input validation vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data. | MEDIUM 6.0 | 0.1 % | ||
| CVE-2023-21477 | | Access of Memory Location After End of Buffer vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to acc | HIGH 7.9 | 0.1 % | ||
| CVE-2023-21476 | | Out-of-bounds Write vulnerability in libaudiosaplus_sec.so library prior to SMR Apr-2023 Release 1 allows local attacker to execute arbitrar | HIGH 8.0 | 0.2 % | ||
| CVE-2023-21475 | | Out-of-bounds Write vulnerability in libaudiosaplus_sec.so library prior to SMR Apr-2023 Release 1 allows local attacker to execute arbitrar | HIGH 8.0 | 0.2 % | ||
| CVE-2023-21473 | | Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary | MEDIUM 6.8 | 0.2 % | ||
| CVE-2023-21472 | | Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary | MEDIUM 6.8 | 0.2 % | ||
| CVE-2023-21471 | | Improper access control vulnerability in SemClipboard prior to SMR Apr-2023 Release 1 allows attackers to read arbitrary files with system p | MEDIUM 4.0 | 0.1 % | ||
| CVE-2023-21470 | | Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location information | MEDIUM 4.0 | 0.1 % | ||
| CVE-2023-21469 | | Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location information | MEDIUM 4.0 | 0.1 % | ||
| CVE-2023-21468 | | Improper access control vulnerability in Telephony prior to SMR Apr-2023 Release 1 allows attackers to access files with escalated permissio | HIGH 7.8 | 0.1 % | ||
| CVE-2023-21467 | | Error in 3GPP specification implementation in Exynos baseband prior to SMR Apr-2023 Release 1 allows incorrect handling of unencrypted messa | CRITICAL 9.8 | 0.3 % | ||
| CVE-2023-21466 | | PendingIntent hijacking vulnerability in CertificatePolicy in framework prior to SMR Apr-2023 Release 1 allows local attackers to access con | MEDIUM 5.3 | 0.1 % | ||
| CVE-2025-21016 | | Improper access control in PkgPredictorService prior to SMR Aug-2025 Release 1 in Chinese Android 13, 14, 15 and 16 allows local attackers t | MEDIUM 4.3 | 0.2 % | ||
| CVE-2025-21015 | | Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to delete file with Document scanner's privilege. | HIGH 7.1 | 0.2 % | ||
| CVE-2025-21014 | | Improper export of android application component in Emergency SoS prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-21013 | | Improper access control in SemSensorManager for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive info | MEDIUM 6.2 | 0.2 % | ||
| CVE-2025-21012 | | Improper access control in fall detection for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to modify fall detection c | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-21011 | | Improper access control in SemSensorService for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive info | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-21010 | | Improper privilege management in SamsungAccount prior to SMR Aug-2025 Release 1 allows local privileged attackers to deactivate Samsung acco | MEDIUM 6.0 | 0.1 % | ||
| CVE-2025-20990 | | Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to access device identifier. | MEDIUM 4.0 | 0.1 % | ||
| CVE-2025-21004 | | Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers t | MEDIUM 6.2 | 0.1 % | ||
| CVE-2025-21003 | | Insecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows local attackers to access sensitive inform | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-21002 | | Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to manipulate broadcasting Auracast. | MEDIUM 6.2 | 0.1 % | ||
| CVE-2025-21001 | | Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to stop broadcasting Auracast. | MEDIUM 6.2 | 0.1 % | ||
| CVE-2025-21000 | | Improper privilege management in Bluetooth prior to SMR Jul-2025 Release 1 allows local attackers to enable Bluetooth. | MEDIUM 6.2 | 0.1 % | ||
| CVE-2025-20999 | | Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025 Release 1 allows secondary users to access | MEDIUM 4.1 | 0.2 % | ||
| CVE-2025-20998 | | Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number. | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-20997 | | Incorrect default permission in Framework for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to reset some configuratio | MEDIUM 6.2 | 0.1 % | ||
| CVE-2025-20983 | | Out-of-bounds write in checking auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write | MEDIUM 6.7 | 0.1 % | ||
| CVE-2025-20982 | | Out-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write | MEDIUM 6.7 | 0.1 % | ||
| CVE-2025-20993 | | Out-of-bounds write in libsecimaging.camera.samsung.so prior to SMR Jun-2025 Release 1 allows local attackers to write out-of-bounds memory. | MEDIUM 6.8 | 0.1 % | ||
| CVE-2025-20992 | | Out-of-bound read in libsecimaging.camera.samsung.so prior to SMR Feb-2025 Release 1 allows local attackers to read out-of-bounds memory. | HIGH 7.7 | 0.2 % | ||
| CVE-2025-20991 | | Improper export of Android application components in Bluetooth prior to SMR Jun-2025 Release 1 allows local attackers to make devices discov | MEDIUM 5.1 | 0.1 % | ||
| CVE-2025-20989 | | Improper logging in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a hmac_key. | MEDIUM 5.2 | 0.1 % | ||
| CVE-2025-20988 | | Out-of-bounds read in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to read out-of-bounds memory. | HIGH 7.1 | 0.2 % | ||
| CVE-2025-20987 | | Improper access control in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a auth_token. | MEDIUM 6.7 | 0.2 % | ||
| CVE-2025-20986 | | Improper access control in ScreenCapture for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to take screenshots. | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-20985 | | Improper privilege management in ThemeManager prior to SMR Jun-2025 Release 1 allows local privileged attackers to reuse trial items. | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-20984 | | Incorrect default permission in Samsung Cloud for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to access data in Sams | MEDIUM 6.8 | 0.1 % | ||
| CVE-2025-20981 | | Improper access control in AudioService prior to SMR Jun-2025 Release 1 allows local attackers to access sensitive information. | MEDIUM 6.2 | 0.2 % | ||
| CVE-2025-20964 | | Out-of-bounds write in parsing media files in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds mem | HIGH 7.8 | 0.2 % | ||
| CVE-2025-20963 | | Out-of-bounds write in memory initialization in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds m | HIGH 7.8 | 0.2 % | ||
| CVE-2025-20962 | | Improper handling of insufficient permission in SpenGesture service prior to SMR May-2025 Release 1 allows local attackers to track the S Pe | MEDIUM 4.0 | 0.2 % | ||
| CVE-2025-20961 | | Improper handling of insufficient permission or privileges in sepunion service prior to SMR May-2025 Release 1 allows local privileged attac | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-20960 | | Improper handling of insufficient permission in CocktailBarService prior to SMR May-2025 Release 1 allows local attackers to use the privile | MEDIUM 4.0 | 0.1 % | ||
| CVE-2025-20959 | | Use of implicit intent for sensitive communication in Wi-Fi P2P service prior to SMR May-2025 Release 1 allows local attackers to access sen | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-20958 | | Improper verification of intent by broadcast receiver in UnifiedWFC prior to SMR May-2025 Release 1 allows local attackers to manipulate VoW | MEDIUM 4.4 | 0.1 % | ||
| CVE-2025-20957 | | Improper access control in SmartManagerCN prior to SMR May-2025 Release 1 allows local attackers to launch arbitrary activities with SmartMa | HIGH 7.8 | 0.2 % | ||
| CVE-2025-20956 | | Improper export of android application components in Settings in Galaxy Watch prior to SMR May-2025 Release 1 allows physical attackers to a | MEDIUM 4.3 | 0.2 % | ||
| CVE-2025-20955 | | Improper Export of Android Application Components in NotificationHistoryImageProvider prior to SMR May-2025 Release 1 allows local attackers | MEDIUM 5.5 | 0.2 % | ||
| CVE-2025-20954 | | Use of implicit intent for sensitive communication in EnrichedCall prior to SMR May-2025 Release 1 allows local attackers to access sensitiv | MEDIUM 5.5 | 0.2 % | ||
| CVE-2025-20953 | | Improper access control in SmartManagerCN prior to SMR May-2025 Release 1 allows local attackers to launch activities within SmartManagerCN. | MEDIUM 5.1 | 0.1 % | ||
| CVE-2025-20937 | | Out-of-bounds write in Keymaster trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to write out-of-bounds memory. | MEDIUM 6.7 | 0.2 % |