Samsung Android vulnerabilities, page 2

502 vulnerabilities

Known vulnerabilities in Samsung Android, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.1CVE-2025-21025samsungandroid
EPSS score
0.12%
Improper access control in MARsExemptionManager prior to SMR Sep-2025 Release 1 allows local attackers to be excluded from background execution management.
7.5CVE-2025-21075samsungandroid
EPSS score
0.28%
Out-of-bounds write in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory.
6.8CVE-2025-21073samsungandroid
EPSS score
0.20%
Insecure default configuration in USB connection mode prior to SMR Nov-2025 Release 1 allows privileged physical attackers to access user data. User interaction is required for triggering this vulnerability.
5.5CVE-2025-21009samsungandroid
EPSS score
0.14%
Out-of-bounds read in decoding malformed frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.
7.8CVE-2025-21051samsungandroid
EPSS score
0.13%
Out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to write out-of-bounds memory.
5.5CVE-2025-21054samsungandroid
EPSS score
0.12%
Out-of-bounds read in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to potentially access out-of-bounds memory.
7.8CVE-2025-21052samsungandroid
EPSS score
0.13%
Out-of-bounds write under specific condition in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
7.1CVE-2025-21015samsungandroid
EPSS score
0.15%
Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to delete file with Document scanner's privilege.
9.8CVE-2025-21043samsungandroidKEV
EPSS score
2.14%
Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.
7.8CVE-2025-21053samsungandroid
EPSS score
0.13%
Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
6.2CVE-2025-21000samsungandroid
EPSS score
0.14%
Improper privilege management in Bluetooth prior to SMR Jul-2025 Release 1 allows local attackers to enable Bluetooth.
6CVE-2025-21010samsungandroid
EPSS score
0.13%
Improper privilege management in SamsungAccount prior to SMR Aug-2025 Release 1 allows local privileged attackers to deactivate Samsung account.
7.8CVE-2025-21034samsungandroid
EPSS score
0.14%
Out-of-bounds write in libsavsvc.so prior to SMR Sep-2025 Release 1 allows local attackers to potentially execute arbitrary code.
4CVE-2025-21029samsungandroid
EPSS score
0.11%
Improper handling of insufficient permission in System UI prior to SMR Sep-2025 Release 1 allows local attackers to send arbitrary replies to messages from the cover display.
5.5CVE-2025-21014samsungandroid
EPSS score
0.13%
Improper export of android application component in Emergency SoS prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information.
5.5CVE-2025-21003samsungandroid
EPSS score
0.14%
Insecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows local attackers to access sensitive information.
5.5CVE-2025-21007samsungandroid
EPSS score
0.14%
Out-of-bounds write in accessing uninitialized memory in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.
6.2CVE-2025-21001samsungandroid
EPSS score
0.14%
Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to stop broadcasting Auracast.
7.1CVE-2025-21080samsungandroid
EPSS score
0.10%
Improper export of android application components in Dynamic Lockscreen prior to SMR Dec-2025 Release 1 allows local attackers to access files with Dynamic Lockscreen's privilege.
7.1CVE-2025-21050samsungandroid
EPSS score
0.13%
Improper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local attackers to access data across multiple user profiles.