Samsung Mobile Vulnerabilities and Affected Products

Open in search

Vulnerabilities associated with Samsung Mobile Devices.

Products

Clear product

Showing 25 vulnerabilities on this page for Samsung Mobile Devices

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

Samsung Galaxy Themes Improper Input Validation Vulnerability

Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity.

CWE-20Aug 10, 2026
CVSS5.2v4.0EPSS0.155%PoCs0SignalsSTIX

Samsung libsavsvc.so VC1 Codec Out-of-Bounds Write

Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

CWE-20Aug 10, 2026
CVSS5.1v4.0EPSS0.119%PoCs0SignalsSTIX

Samsung Mobile Devices libsavsvc.so MPEG4 Codec Out-of-Bounds Write

Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

CWE-20Aug 10, 2026
CVSS5.1v4.0EPSS0.111%PoCs0SignalsSTIX

Samsung Mobile Devices Improper Input Validation in Samsung Message

Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information.

CWE-20Aug 10, 2026
CVSS5.1v4.0EPSS0.145%PoCs0SignalsSTIX

Samsung libsavsvc.so VC1 Codec Out-of-Bounds Write

Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

CWE-681Aug 10, 2026
CVSS5.1v4.0EPSS0.111%PoCs0SignalsSTIX

Samsung Mobile Devices libril_sem.so Stack-based Buffer Overflow

Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code.

CWE-121Aug 10, 2026
CVSS8.4v4.0EPSS0.127%PoCs0SignalsSTIX

Samsung Mobile Devices libsmsd.so Out-of-Bounds Write

Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

CWE-20Aug 10, 2026
CVSS5.1v4.0EPSS0.119%PoCs0SignalsSTIX

Samsung libcodec2_sec_flacdec.so Improper Input Validation Leading to Out-of-Bounds Write

Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

CWE-20Aug 10, 2026
CVSS5.1v4.0EPSS0.119%PoCs0SignalsSTIX

Samsung Mobile libcodec2secqcelpdec Out-of-Bounds Write

Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

CWE-20Aug 10, 2026
CVSS4.4v4.0EPSS0.106%PoCs0SignalsSTIX

Samsung Mobile Devices Weaver Improper Access Control

Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability.

CWE-284Aug 10, 2026
CVSS7.0v4.0EPSS0.113%PoCs0SignalsSTIX

Samsung Mobile Devices AppLock Improper Export of Android Application Components

Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function.

CWE-926Aug 10, 2026
CVSS6.8v4.0EPSS0.155%PoCs0SignalsSTIX

Samsung Mobile Devices SemClipboardService Authorization Bypass

Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.

CWE-939Aug 10, 2026
CVSS4.8v4.0EPSS0.103%PoCs0SignalsSTIX

Samsung Dialer Improper Input Validation

Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction is required for triggering this vulnerability.

CWE-20Aug 10, 2026
CVSS6.0v4.0EPSS0.332%PoCs0SignalsSTIX

Samsung Contacts Improper Input Validation Leading to Cross-Profile Data Access

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles.

CWE-20Aug 10, 2026
CVSS6.7v4.0EPSS0.154%PoCs0SignalsSTIX

Samsung Contacts Improper Export of Android Application Components

Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.

CWE-926Aug 10, 2026
CVSS6.9v4.0EPSS0.113%PoCs0SignalsSTIX

Samsung Contacts Improper Input Validation Local Arbitrary File Deletion

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.

CWE-20Aug 10, 2026
CVSS6.9v4.0EPSS0.119%PoCs0SignalsSTIX

Samsung ImsService Out-of-Bounds Write Remote Code Execution

Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to potentially execute arbitrary code.

CWE-787Jul 28, 2026
CVSS8.3v4.0EPSS0.396%PoCs0SignalsSTIX

Samsung SemClipboardService Path Traversal Vulnerability

Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system privilege.

CWE-22Jul 10, 2026
CVSS6.8v4.0EPSS0.131%PoCs0SignalsSTIX

Samsung Mobile Devices WLAN Security Incorrect Default Permissions

Incorrect default permissions in WLAN security prior to SMR Jul-2026 Release 1 allows local attackers to configure TencentWifiSecurity settings.

CWE-276Jul 10, 2026
CVSS5.1v4.0EPSS0.105%PoCs0SignalsSTIX

Samsung SmartThingsKit Improper Access Control Information Disclosure

Improper access control in SmartThingsKit prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information.

CWE-284Jul 10, 2026
CVSS5.1v4.0EPSS0.105%PoCs0SignalsSTIX

Samsung libpadm.so Out-of-Bounds Write Local Privilege Escalation

Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary code.

CWE-787Jul 10, 2026
CVSS8.4v4.0EPSS0.127%PoCs0SignalsSTIX

Samsung libimagecodec.media.quram.so DNG Parsing Out-of-Bounds Write

Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory.

CWE-787Jul 10, 2026
CVSS8.4v4.0EPSS0.387%PoCs1SignalsSTIX

Samsung fabricKeymaster Trustlet TOCTOU Race Condition

Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR Jul-2026 Release 1 allows local privileged attackers to execute arbitrary code.

CWE-367Jul 10, 2026
CVSS8.4v4.0EPSS0.096%PoCs0SignalsSTIX

Samsung libimagecodec.media.quram.so TIFF Parsing Out-of-Bounds Write

Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory.

CWE-787Jul 10, 2026
CVSS8.4v4.0EPSS0.465%PoCs1SignalsSTIX

Samsung KnoxGuardManager Improper Authorization

Improper authorization in KnoxGuardManager prior to SMR Jul-2026 Release 1 allows local attackers to bypass the persistence configuration of the application.

CWE-269Jul 10, 2026
CVSS5.8v4.0EPSS0.096%PoCs0SignalsSTIX