Samsung vulnerabilities
1,598 vulnerabilities
Known vulnerabilities in Samsung products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1,675 products.
Products
50 of 1,675- Android502 vulnerabilities
- Exynos 1380125 vulnerabilities
- Exynos 1280118 vulnerabilities
- Exynos 980114 vulnerabilities
- Exynos 133099 vulnerabilities
- Exynos 108097 vulnerabilities
- Exynos 85097 vulnerabilities
- Exynos 148090 vulnerabilities
- Exynos 220088 vulnerabilities
- Exynos W92075 vulnerabilities
- Exynos 240072 vulnerabilities
- Exynos 210065 vulnerabilities
- Exynos W93065 vulnerabilities
- Notes64 vulnerabilities
- Exynos Modem 530051 vulnerabilities
- Exynos 99050 vulnerabilities
- Exynos Modem 512349 vulnerabilities
- Exynos 911048 vulnerabilities
- Exynos W100044 vulnerabilities
- Exynos 158042 vulnerabilities
- Sth Eth 25040 vulnerabilities
- X14J36 vulnerabilities
- Galaxy Store31 vulnerabilities
- Exynos 982029 vulnerabilities
- Internet29 vulnerabilities
- Account28 vulnerabilities
- Samsung Mobile26 vulnerabilities
- Magicinfo 9 Server23 vulnerabilities
- Smartthings Hub STH ETH 25023 vulnerabilities
- Exynos 250021 vulnerabilities
- Exynos 982521 vulnerabilities
- Exynos Auto T512321 vulnerabilities
- Escargot20 vulnerabilities
- Smartthings20 vulnerabilities
- Wear Os19 vulnerabilities
- Smart Switch17 vulnerabilities
- Exynos Modem 540015 vulnerabilities
- Galaxy S615 vulnerabilities
- Health14 vulnerabilities
- Members14 vulnerabilities
- Mtower13 vulnerabilities
- Exynos 512311 vulnerabilities
- Exynos 530011 vulnerabilities
- Kies11 vulnerabilities
- Samsung11 vulnerabilities
- Pass10 vulnerabilities
- Rlottie10 vulnerabilities
- Email9 vulnerabilities
- Modem 51239 vulnerabilities
- Modem 54009 vulnerabilities
CVE-2018-16270samsunggalaxy_gear_firmware+9
EPSS score1.16%
Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path.CVE-2018-16269samsunggalaxy_gear_firmware+9EPSS score1.38%
The wnoti system service in Samsung Galaxy Gear series allows an unprivileged process to take over the internal notification message data, due to improper D-Bus security policy configurations. This affects Tizen-based firmwares including Samsung Galaxy Gear series before build RE2.CVE-2018-16271samsunggalaxy_gear_firmware+9EPSS score0.81%
The wemail_consumer_service (from the built-in application wemail) in Samsung Galaxy Gear series allows an unprivileged process to manipulate a user's mailbox, due to improper D-Bus security policy configurations. An arbitrary email can also be sent from the mailbox via the paired smartphone. This affects Tizen-based firmwares including Samsung Galaxy Gear series before build RE2.CVE-2018-16272samsunggalaxy_gear_firmware+9EPSS score1.63%
The wpa_supplicant system service in Samsung Galaxy Gear series allows an unprivileged process to fully control the Wi-Fi interface, due to the lack of its D-Bus security policy configurations. This affects Tizen-based firmwares including Samsung Galaxy Gear series before build RE2.CVE-2018-11614samsungsamsung_membersEPSS score1.30%
This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Samsung Members Fixed in version 2.4.25. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of Intents. The issue lies in the ability to send an Intent that would not otherwise be reachable. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the application. Was ZDI-CAN-5361.CVE-2018-11689hanwha-securityhrd-1641_firmware+9EPSS score1.57%
Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cgi-bin/webviewer_login_page data3 parameter. (The same Web Viewer codebase was transitioned from Samsung to Hanwha.)CVE-2018-20135samsunggalaxy_appsEPSS score1.76%
Samsung Galaxy Apps before 4.4.01.7 allows modification of the hostname used for load balancing on installations of applications through a man-in-the-middle attack. An attacker may trick Galaxy Apps into using an arbitrary hostname for which the attacker can provide a valid SSL certificate, and emulate the API of the app store to modify existing apps at installation time. The specific flaw involves an HTTP method to obtain the load-balanced hostname that enforces SSL only after obtaining a hostname from the load balancer, and a missing app signature validation in the application XML. An attacker can exploit this vulnerability to achieve Remote Code Execution on the device. The Samsung ID is SVE-2018-12071.CVE-2018-9141samsungsamsung_mobileEPSS score2.35%
On Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software, Gallery allows remote attackers to execute arbitrary code via a BMP file with a crafted resolution, aka SVE-2017-11105.CVE-2018-9140samsungsamsung_mobileEPSS score0.64%
On Samsung mobile devices with M(6.0) software, the Email application allows XSS via an event attribute and arbitrary file loading via a src attribute, aka SVE-2017-10747.CVE-2018-9142samsungsamsung_mobileEPSS score0.79%
On Samsung mobile devices with N(7.x) software, attackers can install an arbitrary APK in the Secure Folder SD Card area because of faulty validation of a package signature and package name, aka SVE-2017-10932.CVE-2018-9139samsungsamsung_mobileEPSS score2.47%
On Samsung mobile devices with N(7.x) software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165.CVE-2018-9143samsungsamsung_mobileEPSS score2.34%
On Samsung mobile devices with M(6.0) and N(7.x) software, a heap overflow in the sensorhub binder service leads to code execution in a privileged process, aka SVE-2017-10991.CVE-2018-14856samsunggalaxy_s6EPSS score0.95%
Buffer overflow in dhd_bus_flow_ring_create_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker (who has obtained code execution on the Wi-Fi) chip to cause the device driver to perform invalid memory accesses. The Samsung ID is SVE-2018-11785.CVE-2018-14904samsungsyncthru_web_serviceEPSS score0.69%
Samsung Syncthru Web Service V4.05.61 is vulnerable to Multiple unauthenticated XSS attacks on several parameters, as demonstrated by ruiFw_pid.CVE-2018-14854samsunggalaxy_s6EPSS score0.95%
Buffer overflow in dhd_bus_flow_ring_delete_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker (who has obtained code execution on the Wi-Fi chip) to cause the device driver to perform invalid memory accesses. The Samsung ID is SVE-2018-11785.CVE-2018-14745samsunggalaxy_s6EPSS score1.91%
Buffer overflow in prot_get_ring_space in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has obtained code execution on the Wi-Fi chip) to overwrite kernel memory due to improper validation of the ring buffer read pointer. The Samsung ID is SVE-2018-12029.CVE-2018-14318samsunggalaxy_s8_firmware+1EPSS score2.49%
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S8 G950FXXU1AQL5. User interaction is required to exploit this vulnerability in that the target must have their cellular radios enabled. The specific flaw exists within the handling of IPCP headers. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to execute code under the context of the baseband processor. Was ZDI-CAN-5368.CVE-2018-14853samsunggalaxy_s6EPSS score0.94%
A NULL pointer dereference in dhd_prot_txdata_write_flush in drivers/net/wireless/bcmdhd4358/dhd_msgbuf.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has obtained code execution on the Wi-Fi chip) to cause the device to reboot. The Samsung ID is SVE-2018-11783.CVE-2018-14852samsunggalaxy_s6EPSS score0.96%
Out-of-bounds array access in dhd_rx_frame in drivers/net/wireless/bcmdhd4358/dhd_linux.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has obtained code execution on the Wi-Fi chip) to cause invalid accesses to operating system memory due to improper validation of the network interface index provided by the Wi-Fi chip's firmware.CVE-2018-14908samsungsyncthru_web_serviceEPSS score0.51%
Samsung Syncthru Web Service V4.05.61 is vulnerable to CSRF on every request, as demonstrated by sws.application/printinformation/printReportSetupView.sws for a "Print emails sent" action.