Samsung Mobile vulnerabilities, page 4
634 vulnerabilities
Known vulnerabilities in Samsung Mobile products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 176 products.
CVE-2021-25464samsung mobilesamsung capture+1
EPSS score0.28%
An improper file management vulnerability in SamsungCapture prior to version 4.8.02 allows sensitive information leak.CVE-2021-25388googleandroid+1EPSS score0.09%
Improper caller check vulnerability in Knox Core prior to SMR MAY-2021 Release 1 allows attackers to install arbitrary app.CVE-2021-25450googleandroid+1EPSS score0.17%
Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Sep-2021 Release 1 allows attackers to write file as system uid via remote socket.CVE-2021-25338googleandroid+1EPSS score0.13%
Improper memory access control in RKP in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, given a compromised kernel, to write certain part of RKP EL2 memory region.CVE-2021-25430googleandroid+1EPSS score0.16%
Improper access control vulnerability in Bluetooth application prior to SMR July-2021 Release 1 allows untrusted application to access the Bluetooth information in Bluetooth application.CVE-2021-25448samsung mobilesmart touch call+1EPSS score0.81%
Improper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows arbitrary webpage loading in webview.CVE-2021-25370samsung mobilesamsung mobile devices+1KEVEPSS score0.89%
An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic.CVE-2021-25423samsung mobilewatch active2 plugin+1EPSS score0.24%
Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone via log.CVE-2021-25479googleandroid+1EPSS score0.55%
A possible heap-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution.CVE-2021-25429googleandroid+1EPSS score0.16%
Improper privilege management vulnerability in Bluetooth application prior to SMR July-2021 Release 1 allows untrusted application to access the Bluetooth information in Bluetooth application.CVE-2021-25468googleandroid+1EPSS score0.11%
A possible guessing and confirming a byte memory vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows attackers to read arbitrary memory address.CVE-2021-25525samsung mobilesamsung pay+1EPSS score0.34%
Improper check or handling of exception conditions vulnerability in Samsung Pay (US only) prior to version 4.0.65 allows attacker to use NFC without user recognition.CVE-2021-25473googleandroid+1EPSS score0.10%
Assuming a shell privilege is gained, an improper exception handling for multi_sim_bar_hide_by_meadia_full value in SystemUI prior to SMR Oct-2021 Release 1 allows an attacker to cause a permanent denial of service in user device before factory reset.CVE-2021-25431samsung mobilecameralyzer+1EPSS score0.20%
Improper access control vulnerability in Cameralyzer prior to versions 3.2.1041 in 3.2.x, 3.3.1040 in 3.3.x, and 3.4.4210 in 3.4.x allows untrusted applications to access some functions of Cameralyzer.CVE-2021-25361googleandroid+1EPSS score0.17%
An improper access control vulnerability in stickerCenter prior to SMR APR-2021 Release 1 allows local attackers to read or write arbitrary files of system process via untrusted applications.CVE-2021-25398samsung mobilebixby voice+1EPSS score0.24%
Intent redirection vulnerability in Bixby Voice prior to version 3.1.12 allows attacker to access contacts.CVE-2021-25441samsung mobilear emoji editor+1EPSS score0.25%
Improper input validation vulnerability in AR Emoji Editor prior to version 4.4.03.5 in Android Q(10.0) and above allows untrusted applications to access arbitrary files with an escalated privilege.CVE-2021-25333samsung mobilesamsung pay mini+1EPSS score0.27%
Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance information over the lockscreen via scanning specific QR code.CVE-2021-25345googleandroid+1EPSS score0.12%
Graphic format mismatch while converting video format in hwcomposer prior to SMR Mar-2021 Release 1 results in kernel panic due to unsupported format.CVE-2021-25470googleandroid+1EPSS score0.12%
An improper caller check logic of SMC call in TEEGRIS secure OS prior to SMR Oct-2021 Release 1 can be used to compromise TEE.