Samsung Android vulnerabilities, page 3
502 vulnerabilities
Known vulnerabilities in Samsung Android, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-21074samsungandroid
EPSS score0.29%
Out-of-bounds read in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory.CVE-2025-21032samsungandroidEPSS score0.17%
Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions.CVE-2025-21041samsungandroidEPSS score0.13%
Insecure Storage of Sensitive Information in Secure Folder prior to Android 16 allows local attackers to access sensitive information.CVE-2025-21046samsungandroidEPSS score0.16%
Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list.CVE-2025-21072samsungandroidEPSS score0.11%
Out-of-bounds write in decoding metadata in fingerprint trustlet prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.CVE-2025-21048samsungandroidEPSS score0.18%
Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to execute arbitrary code.CVE-2025-21044samsungandroidEPSS score0.13%
Out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.CVE-2025-21026samsungandroidEPSS score0.11%
Improper handling of insufficient permission in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to interrupt the call.CVE-2025-21033samsungandroidEPSS score0.12%
Improper access control in ContactProvider prior to SMR Sep-2025 Release 1 allows local attackers to access sensitive information.CVE-2025-21028samsungandroidEPSS score0.11%
Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items.CVE-2025-20963samsungandroidEPSS score0.17%
Out-of-bounds write in memory initialization in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory.CVE-2025-20908samsungandroidEPSS score0.28%
Use of insufficiently random values in Auracast prior to SMR Mar-2025 Release 1 allows adjacent attackers to access Auracast broadcasting.CVE-2025-20938samsungandroidEPSS score0.15%
Improper access control in SamsungContacts prior to SMR Apr-2025 Release 1 allows local attackers to access protected data in SamsungContacts.CVE-2025-20993samsungandroidEPSS score0.14%
Out-of-bounds write in libsecimaging.camera.samsung.so prior to SMR Jun-2025 Release 1 allows local attackers to write out-of-bounds memory.CVE-2025-20942samsungandroidEPSS score0.14%
Improper Verification of Intent by Broadcast Receiver in DeviceIdService prior to SMR Apr-2025 Release 1 allows local attackers to reset OAID.CVE-2025-20936samsungandroidEPSS score0.15%
Improper access control in HDCP trustlet prior to SMR Apr-2025 Release 1 allows local attackers with shell privilege to escalate their privileges to root.CVE-2025-20934samsungandroidEPSS score0.15%
Improper access control in Sticker Center prior to SMR Apr-2025 Release 1 allows local attackers to access image files with system privilege.CVE-2025-20990samsungandroidEPSS score0.12%
Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to access device identifier.CVE-2025-20983samsungandroidEPSS score0.14%
Out-of-bounds write in checking auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.CVE-2025-20887samsungandroidEPSS score0.14%
Out-of-bounds read in accessing table used for svp8t in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitrary memory. User interaction is required for triggering this vulnerability.