Samsung Android vulnerabilities, page 5
502 vulnerabilities
Known vulnerabilities in Samsung Android, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-20941samsungandroid
EPSS score0.14%
Improper access control in InputManager to SMR Apr-2025 Release 1 allows local attackers to access the scancode of specific input device.CVE-2025-20909samsungandroidEPSS score0.14%
Use of implicit intent for sensitive communication in Settings prior to SMR Mar-2025 Release 1 allows local attackers to access sensitive information.CVE-2025-20988samsungandroidEPSS score0.16%
Out-of-bounds read in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to read out-of-bounds memory.CVE-2025-20958samsungandroidEPSS score0.13%
Improper verification of intent by broadcast receiver in UnifiedWFC prior to SMR May-2025 Release 1 allows local attackers to manipulate VoWiFi related behaviors.CVE-2025-20964samsungandroidEPSS score0.17%
Out-of-bounds write in parsing media files in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory.CVE-2025-20881samsungandroidEPSS score0.16%
Out-of-bounds write in accessing buffer storing the decoded video frames in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability.CVE-2025-20962samsungandroidEPSS score0.15%
Improper handling of insufficient permission in SpenGesture service prior to SMR May-2025 Release 1 allows local attackers to track the S Pen position.CVE-2025-20886samsungandroidEPSS score0.13%
Inclusion of sensitive information in test code in softsim trustlet prior to SMR Jan-2025 Release 1 allows local privileged attackers to get test key.CVE-2025-20888samsungandroidEPSS score0.15%
Out-of-bounds write in handling the block size for smp4vtd in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability.CVE-2025-20947samsungandroidEPSS score0.17%
Improper handling of insufficient permission or privileges in ClipboardService prior to SMR Apr-2025 Release 1 allows local attackers to access image files across multiple users. User interaction is required for triggering this vulnerability.CVE-2025-20907samsungandroidEPSS score0.14%
Improper privilege management in Samsung Find prior to SMR Feb-2025 Release 1 allows local privileged attackers to disable Samsung Find.CVE-2025-20957samsungandroidEPSS score0.15%
Improper access control in SmartManagerCN prior to SMR May-2025 Release 1 allows local attackers to launch arbitrary activities with SmartManagerCN privilege.CVE-2025-20890samsungandroidEPSS score0.15%
Out-of-bounds write in decoding frame buffer in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability.CVE-2025-20943samsungandroidEPSS score0.15%
Out-of-bounds write in secfr trustlet prior to SMR Apr-2025 Release 1 allows local privileged attackers to cause memory corruption.CVE-2025-20892samsungandroidEPSS score0.21%
Protection Mechanism Failure in bootloader prior to SMR Jan-2025 Release 1 allows physical attackers to allow to execute fastboot command. User interaction is required for triggering this vulnerability.CVE-2025-20944samsungandroidEPSS score0.17%
Out-of-bounds read in parsing audio data in libsavsac.so prior to SMR Apr-2025 Release 1 allows local attackers to read out-of-bounds memory.CVE-2025-20952samsungandroidEPSS score0.14%
Improper access control in Mdecservice prior to SMR Apr-2025 Release 1 allows local attackers to access arbitrary files with system privilege.CVE-2025-20882samsungandroidEPSS score0.16%
Out-of-bounds write in accessing uninitialized memory for svc1td in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability.CVE-2025-20960samsungandroidEPSS score0.13%
Improper handling of insufficient permission in CocktailBarService prior to SMR May-2025 Release 1 allows local attackers to use the privileged api.CVE-2025-20905samsungandroidEPSS score0.16%
Out-of-bounds read and write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privileged attackers to read and write out-of-bounds memory.