Samsung Mobile vulnerabilities, page 2
634 vulnerabilities
Known vulnerabilities in Samsung Mobile products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 176 products.
CVE-2021-25378samsung mobilesmartthings+1
EPSS score0.97%
Improper access control of certain port in SmartThings prior to version 1.7.63.6 allows remote temporary denial of service.CVE-2021-25501googleandroid+1EPSS score0.10%
An improper access control vulnerability in SCloudBnRReceiver in SecTelephonyProvider prior to SMR Nov-2021 Release 1 allows untrusted application to call some protected providers.CVE-2021-25517googleandroid+1EPSS score0.12%
An improper input validation vulnerability in LDFW prior to SMR Dec-2021 Release 1 allows attackers to perform arbitrary code execution.CVE-2021-25380samsung mobilebixby+1EPSS score0.60%
Improper handling of exceptional conditions in Bixby prior to version 3.0.53.02 allows attacker to execute the actions registered by the user.CVE-2021-25343samsung mobilesamsung members+1EPSS score0.22%
Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above) allows unauthorized actions including denial of service attack by hijacking the provider.CVE-2021-25369samsung mobilesamsung mobile devices+1KEVEPSS score1.08%
An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.CVE-2021-25394samsung mobilesamsung mobile devices+1KEVEPSS score0.40%
A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised.CVE-2021-25339googleandroid+1EPSS score0.12%
Improper address validation in HArx in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, given a compromised kernel, to corrupt EL2 memory.CVE-2021-25434linuxtizen+1EPSS score1.68%
Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execution using param partition in wireless firmware download mode.CVE-2021-25382googleandroid+1EPSS score0.10%
An improper authorization of using debugging command in Secure Folder prior to SMR Oct-2020 Release 1 allows unauthorized access to contents in Secure Folder via debugging command.CVE-2021-25466samsung mobilesamsung internet+1EPSS score0.77%
Improper scheme check vulnerability in Samsung Internet prior to version 15.0.2.47 allows attackers to perform Man-in-the-middle attack and obtain Samsung Account token.CVE-2021-25408googleandroid+1EPSS score0.13%
A possible buffer overflow vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write and code execution.CVE-2021-25410googleandroid+1EPSS score0.17%
Improper access control of a component in CallBGProvider prior to SMR JUN-2021 Release 1 allows local attackers to access arbitrary files with an escalated privilege.CVE-2021-25485googleandroid+1EPSS score0.18%
Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Oct-2021 Release 1 allows attackers to write file as system UID via BT remote socket.CVE-2021-25363googleandroid+1EPSS score0.11%
An improper access control in ActivityManagerService prior to SMR APR-2021 Release 1 allows untrusted applications to access running processesdelete some local files.CVE-2021-25353samsung mobilegalaxy themes+1EPSS score0.22%
Using empty PendingIntent in Galaxy Themes prior to version 5.2.00.1215 allows local attackers to read/write private file directories of Galaxy Themes application without permission via hijacking the PendingIntent.CVE-2021-25371samsung mobilesamsung mobile devices+1KEVEPSS score0.80%
A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.CVE-2021-25512googleandroid+1EPSS score0.11%
An improper validation vulnerability in telephony prior to SMR Dec-2021 Release 1 allows attackers to launch certain activities.CVE-2021-25420samsung mobilegalaxy watch plugin+1EPSS score0.24%
Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log.CVE-2021-25452googleandroid+1EPSS score0.12%
An improper input validation vulnerability in loading graph file in DSP driver prior to SMR Sep-2021 Release 1 allows attackers to perform permanent denial of service on the device.