Samsung Mobile Devices vulnerabilities, page 4
374 vulnerabilities
Known vulnerabilities in Samsung Mobile Devices, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2021-25510google · android +1 moregoogle androidAn improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows local arbitrary code execution.EPSS0.11%MediumCVE-2021-25413google · android +1 moregoogle androidImproper sanitization of incoming intent in Samsung Contacts prior to SMR JUN-2021 Release 1 allows local attackers to get permissions to access arbitrary data with Samsung Contacts privilege.EPSS0.18%MediumCVE-2021-25472google · android +1 moregoogle androidAn improper access control vulnerability in BluetoothSettingsProvider prior to SMR Oct-2021 Release 1 allows untrusted application to overwrite some Bluetooth information.EPSS0.10%CriticalCVE-2021-25385google · android +1 moregoogle androidAn improper input validation vulnerability in sdfffd_parse_chunk_PROP() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.EPSS0.63%MediumCVE-2021-25416google · android +1 moregoogle androidAssuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to create executable kernel page outside code area.EPSS0.12%MediumCVE-2021-25344google · android +1 moregoogle androidMissing permission check in knox_custom service prior to SMR Mar-2021 Release 1 allows attackers to gain access to device's serial number without permission.EPSS0.12%HighCVE-2021-25516google · android +1 moregoogle androidAn improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attackers to track locations.EPSS0.31%MediumCVE-2021-25503google · android +1 moregoogle androidImproper input validation vulnerability in HDCP prior to SMR Nov-2021 Release 1 allows attackers to arbitrary code execution.EPSS0.12%CriticalCVE-2021-25346google · android +1 moregoogle androidA possible arbitrary memory overwrite vulnerabilities in quram library version prior to SMR Jan-2021 Release 1 allow arbitrary code execution.EPSS1.22%CriticalCVE-2021-25387google · android +1 moregoogle androidAn improper input validation vulnerability in sflacfd_get_frm() in libsflacextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.EPSS0.57%MediumCVE-2021-25515google · android +1 moregoogle androidAn improper usage of implicit intent in SemRewardManager prior to SMR Dec-2021 Release 1 allows attackers to access BSSID.EPSS0.10%MediumCVE-2021-25483google · android +1 moregoogle androidLack of boundary checking of a buffer in livfivextractor library prior to SMR Oct-2021 Release 1 allows OOB read.EPSS0.24%MediumCVE-2021-25389google · android +1 moregoogle androidImproper running task check in S Secure prior to SMR MAY-2021 Release 1 allows attackers to use locked app without authentication.EPSS0.11%MediumCVE-2021-25362google · android +1 moregoogle androidAn improper permission management in CertInstaller prior to SMR APR-2021 Release 1 allows untrusted applications to delete certain local files.EPSS0.10%HighCVE-2021-25407google · android +1 moregoogle androidA possible out of bounds write vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write.EPSS0.17%MediumCVE-2021-25454google · android +1 moregoogle androidOOB read vulnerability in libsaacextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute remote DoS via forged aac file.EPSS0.22%HighCVE-2021-25487samsung mobile · samsung mobile devices +1 moresamsung mobile samsung mobile devicesLack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer.KEVEPSS0.64%HighCVE-2021-25480google · android +1 moregoogle androidA lack of replay attack protection in GUTI REALLOCATION COMMAND message process in Qualcomm modem prior to SMR Oct-2021 Release 1 can lead to remote denial of service on mobile network connection.EPSS0.47%MediumCVE-2021-25443google · android +1 moregoogle androidA use after free vulnerability in conn_gadget driver prior to SMR AUG-2021 Release 1 allows malicious action by an attacker.EPSS0.10%MediumCVE-2021-25488google · android +1 moregoogle androidLack of boundary checking of a buffer in recv_data() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read.EPSS0.11%