Samsung Mobile vulnerabilities
634 vulnerabilities
Known vulnerabilities in Samsung Mobile products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 176 products.
Products
50 of 176- Samsung Mobile Devices374 vulnerabilities
- Samsung Account16 vulnerabilities
- Samsung Internet15 vulnerabilities
- Galaxy Store14 vulnerabilities
- Samsung Notes12 vulnerabilities
- Smartthings11 vulnerabilities
- Samsung Members8 vulnerabilities
- Samsung Pass8 vulnerabilities
- Samsung Blockchain Keystore6 vulnerabilities
- Smart Things6 vulnerabilities
- Tizen Wearable Devices6 vulnerabilities
- Charm By Samsung5 vulnerabilities
- Samsung Email5 vulnerabilities
- Samsung Pay5 vulnerabilities
- Samsung Wearable Devices5 vulnerabilities
- Group Sharing4 vulnerabilities
- Samsung Cloud4 vulnerabilities
- Samsung Flow4 vulnerabilities
- Samsung Health4 vulnerabilities
- Samsung Mobile Devices With Exynos Chipsets4 vulnerabilities
- Bixby Vision3 vulnerabilities
- Factorycamera3 vulnerabilities
- Find My Mobile3 vulnerabilities
- Galaxy Watch Plugin3 vulnerabilities
- Reminder3 vulnerabilities
- Samsung Pay Mini3 vulnerabilities
- Smart Switch PC3 vulnerabilities
- Bixby Voice2 vulnerabilities
- Cameralyzer2 vulnerabilities
- Com.Samsung.Android.Waterplugin2 vulnerabilities
- Editor Lite2 vulnerabilities
- Factorycamerafb2 vulnerabilities
- Galaxy Watch3 Plugin2 vulnerabilities
- Myfiles2 vulnerabilities
- S Assistant2 vulnerabilities
- Samsung Calendar2 vulnerabilities
- Samsung Capture2 vulnerabilities
- Samsung Checkout2 vulnerabilities
- Samsung Kies2 vulnerabilities
- Smarttagplugin2 vulnerabilities
- Watch Active Plugin2 vulnerabilities
- Watch Active2 Plugin2 vulnerabilities
- Accessibility1 vulnerabilities
- AR Emoji Editor1 vulnerabilities
- Bixby1 vulnerabilities
- Bixby Routines1 vulnerabilities
- Bixby Touch1 vulnerabilities
- Bixbytouch1 vulnerabilities
- Calendar1 vulnerabilities
- Camera1 vulnerabilities
CVE-2021-25455googleandroid+1
EPSS score0.19%
OOB read vulnerability in libsaviextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to access arbitrary address through pointer via forged avi file.CVE-2021-25453googleandroid+1EPSS score0.11%
Some improper access control in Bluetooth APIs prior to SMR Sep-2021 Release 1 allows untrusted application to get Bluetooth information.CVE-2021-25494samsung mobilesamsung notes+1EPSS score0.29%
A possible buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows arbitrary code execution.CVE-2021-25417googleandroid+1EPSS score0.39%
Improper authorization in SDP SDK prior to SMR JUN-2021 Release 1 allows access to internal storage.CVE-2021-25476googleandroid+1EPSS score0.10%
An information disclosure vulnerability in Widevine TA log prior to SMR Oct-2021 Release 1 allows attackers to bypass the ASLR protection mechanism in TEE.CVE-2021-25482googleandroid+1EPSS score0.13%
SQL injection vulnerabilities in CMFA framework prior to SMR Oct-2021 Release 1 allow untrusted application to overwrite some CMFA framework information.CVE-2021-25489samsung mobilesamsung mobile devices+1KEVEPSS score0.53%
Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic.CVE-2021-25358googleandroid+1EPSS score0.11%
A vulnerability that stores IMSI values in an improper path prior to SMR APR-2021 Release 1 allows local attackers to access IMSI values without any permission via untrusted applications.CVE-2021-25379samsung mobilegallery+1EPSS score0.21%
Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action.CVE-2021-25360googleandroid+1EPSS score0.73%
An improper input validation vulnerability in libswmfextractor library prior to SMR APR-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.CVE-2021-25428googleandroid+1EPSS score0.10%
Improper validation check vulnerability in PackageManager prior to SMR July-2021 Release 1 allows untrusted applications to get dangerous level permission without user confirmation in limited circumstances.CVE-2021-25451googleandroid+1EPSS score0.23%
A PendingIntent hijacking in NetworkPolicyManagerService prior to SMR Sep-2021 Release 1 allows attackers to get IMSI data.CVE-2021-25373samsung mobilecustomization service+1EPSS score0.21%
Using unsafe PendingIntent in Customization Service prior to version 2.2.02.1 in Android O(8.x), 2.4.03.0 in Android P(9.0), 2.7.02.1 in Android Q(10.0) and 2.9.01.1 in Android R(11.0) allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.CVE-2021-25518googleandroid+1EPSS score0.11%
An improper boundary check in secure_log of LDFW and BL31 prior to SMR Dec-2021 Release 1 allows arbitrary memory write and code execution.CVE-2021-25526samsung mobilesamsung blockchain wallet+1EPSS score0.21%
Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows attacker to execute privileged action.CVE-2021-25498samsung mobilesamsung notes+1EPSS score0.28%
A possible buffer overflow vulnerability in maetd_eco_cb_mode of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows arbitrary code execution.CVE-2021-25399samsung mobilesmart manager+1EPSS score0.22%
Improper configuration in Smart Manager prior to version 11.0.05.0 allows attacker to access the file with system privilege.CVE-2021-25390googleandroid+1EPSS score0.16%
Intent redirection vulnerability in PhotoTable prior to SMR MAY-2021 Release 1 allows attackers to execute privileged action.CVE-2021-25341samsung mobiles assistant+1EPSS score0.22%
Calling of non-existent provider in S Assistant prior to version 6.5.01.22 allows unauthorized actions including denial of service attack by hijacking the provider.CVE-2021-25386googleandroid+1EPSS score0.63%
An improper input validation vulnerability in sdfffd_parse_chunk_FVER() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.