Samsung Mobile Devices vulnerabilities, page 5

374 vulnerabilities

Known vulnerabilities in Samsung Mobile Devices, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

3.3LowCVE-2021-25486google · android +1 moregoogle androidExposure of information vulnerability in ipcdump prior to SMR Oct-2021 Release 1 allows an attacker detect device information via analyzing packet in log.EPSS0.10%9.8CriticalCVE-2021-25449google · android +1 moregoogle androidAn improper input validation vulnerability in libsapeextractor library prior to SMR Sep-2021 Release 1 allows attackers to execute arbitrary code in mediaextractor process.EPSS0.39%5.5MediumCVE-2021-25462google · android +1 moregoogle androidNULL pointer dereference vulnerability in NPU driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption.EPSS0.12%8.8HighCVE-2021-25356google · android +1 moregoogle androidAn improper caller check vulnerability in Managed Provisioning prior to SMR APR-2021 Release 1 allows unprivileged application to install arbitrary application, grant device admin permission and then delete several installed application.EPSS0.18%7.2HighCVE-2021-25500google · android +1 moregoogle androidA missing input validation in HDCP LDFW prior to SMR Nov-2021 Release 1 allows attackers to overwrite TZASC allowing TEE compromise.EPSS0.10%5.5MediumCVE-2021-25458google · android +1 moregoogle androidNULL pointer dereference vulnerability in ION driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption.EPSS0.12%7.5HighCVE-2021-25471google · android +1 moregoogle androidA lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial of service on mobile network connection and battery depletion.EPSS0.40%7.8HighCVE-2021-25414google · android +1 moregoogle androidImproper sanitization of incoming intent in Samsung Contacts prior to SMR JUN-2021 Release 1 allows local attackers to copy or overwrite arbitrary files with Samsung Contacts privilege.EPSS0.18%5.5MediumCVE-2021-25444google · android +1 moregoogle androidAn IV reuse vulnerability in keymaster prior to SMR AUG-2021 Release 1 allows decryption of custom keyblob with privileged process.EPSS0.76%5.5MediumCVE-2021-25456google · android +1 moregoogle androidOOB read vulnerability in libswmfextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute memcpy at arbitrary address via forged wmf file.EPSS0.25%6.5MediumCVE-2021-25514google · android +1 moregoogle androidAn improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive information.EPSS0.25%4MediumCVE-2021-25519google · android +1 moregoogle androidAn improper access control vulnerability in CPLC prior to SMR Dec-2021 Release 1 allows local attackers to access CPLC information without permission.EPSS0.10%7.8HighCVE-2021-25365google · android +1 moregoogle androidAn improper exception control in softsimd prior to SMR APR-2021 Release 1 allows unprivileged applications to access the API in softsimd.EPSS0.11%7.2HighCVE-2021-25372samsung mobile · samsung mobile devices +1 moresamsung mobile samsung mobile devicesAn improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.KEVEPSS0.80%2.4LowCVE-2021-25409google · android +1 moregoogle androidImproper access in Notification setting prior to SMR JUN-2021 Release 1 allows physically proximate attackers to set arbitrary notification via physically configuring device.EPSS0.10%4MediumCVE-2021-25359google · android +1 moregoogle androidAn improper SELinux policy prior to SMR APR-2021 Release 1 allows local attackers to access AP information without proper permissions via untrusted applications.EPSS0.11%6MediumCVE-2021-25490google · android +1 moregoogle androidA keyblob downgrade attack in keymaster prior to SMR Oct-2021 Release 1 allows attacker to trigger IV reuse vulnerability with privileged process.EPSS0.75%4MediumCVE-2021-25364google · android +1 moregoogle androidA pendingIntent hijacking vulnerability in Secure Folder prior to SMR APR-2021 Release 1 allows unprivileged applications to access contact information.EPSS0.13%4MediumCVE-2021-25391google · android +1 moregoogle androidIntent redirection vulnerability in Secure Folder prior to SMR MAY-2021 Release 1 allows attackers to execute privileged action.EPSS0.16%7.2HighCVE-2021-25475google · android +1 moregoogle androidA possible heap-based buffer overflow vulnerability in DSP kernel driver prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution.EPSS0.12%