Samsung Android vulnerabilities
502 vulnerabilities
Known vulnerabilities in Samsung Android, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-25489samsung mobilesamsung mobile devices+1KEV
EPSS score0.53%
Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic.CVE-2021-25369samsung mobilesamsung mobile devices+1KEVEPSS score1.08%
An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.CVE-2021-25394samsung mobilesamsung mobile devices+1KEVEPSS score0.40%
A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised.CVE-2021-25371samsung mobilesamsung mobile devices+1KEVEPSS score0.80%
A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.CVE-2021-25370samsung mobilesamsung mobile devices+1KEVEPSS score0.89%
An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic.CVE-2021-25395samsung mobilesamsung mobile devices+1KEVEPSS score0.37%
A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.CVE-2021-25487samsung mobilesamsung mobile devices+1KEVEPSS score0.64%
Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer.CVE-2021-25372samsung mobilesamsung mobile devices+1KEVEPSS score0.80%
An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.CVE-2021-25337samsung mobilesamsung mobile devices+1KEVEPSS score2.81%
Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files.CVE-2025-21031samsungandroidEPSS score0.14%
Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs.CVE-2025-21047samsungandroidEPSS score0.19%
Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs.CVE-2025-21055samsungandroidEPSS score0.29%
Out-of-bounds read and write in libimagecodec.quram.so prior to SMR Oct-2025 Release 1 allows remote attackers to access out-of-bounds memory.CVE-2025-21049samsungandroidEPSS score0.14%
Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.CVE-2025-21008samsungandroidEPSS score0.14%
Out-of-bounds read in decoding frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.CVE-2025-21006samsungandroidEPSS score0.14%
Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 allows local attackers to write out-of-bounds memory.CVE-2025-21042samsungandroidKEVEPSS score33.17%
Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.CVE-2025-21005samsungandroidEPSS score0.14%
Improper access control in isemtelephony prior to Android 15 allows local attackers to access sensitive information.CVE-2025-21071samsungandroidEPSS score0.12%
Out-of-bounds write in handling opcode in fingerprint trustlet prior to SMR Nov-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.CVE-2025-21027samsungandroidEPSS score0.11%
Improper verification of intent by broadcast receiver in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to temporarily disable the SIM.CVE-2025-21002samsungandroidEPSS score0.13%
Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to manipulate broadcasting Auracast.