# Samsung Mobile Devices.

Every CVE that names Samsung Mobile Devices among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.](https://agentprime.io/advisories/CVE-2026-21126.md)
  `CVE-2026-21126` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.9 Medium · Not analysed yet · Published 12 Oct 2026
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21125.md)
  `CVE-2026-21125` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.6 High · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-20
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21124.md)
  `CVE-2026-21124` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.6 High · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-20
- [Improper privilege management in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21123.md)
  `CVE-2026-21123` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.7 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation
- [Out-of-bounds write in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21122.md)
  `CVE-2026-21122` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.0 High · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption
- [Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs.](https://agentprime.io/advisories/CVE-2026-21121.md)
  `CVE-2026-21121` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-280
- [Use after free in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21120.md)
  `CVE-2026-21120` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.9 High · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption
- [Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory.](https://agentprime.io/advisories/CVE-2026-21119.md)
  `CVE-2026-21119` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.8 Medium · Not analysed yet · Published 12 Oct 2026
- [Improper access control in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21118.md)
  `CVE-2026-21118` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Broken access control
- [Improper access control in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21117.md)
  `CVE-2026-21117` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.1 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Broken access control
- [Out-of-bounds write in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21116.md)
  `CVE-2026-21116` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.1 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption
- [Out-of-bounds write in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21115.md)
  `CVE-2026-21115` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.1 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption
- [Out-of-bounds write in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21114.md)
  `CVE-2026-21114` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.0 High · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption
- [Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications.](https://agentprime.io/advisories/CVE-2026-21140.md)
  `CVE-2026-21140` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.9 Medium · Not analysed yet · Published 2 Oct 2026
- [Heap-based buffer overflow in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21104.md)
  `CVE-2026-21104` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.1 High · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Path traversal in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21103.md)
  `CVE-2026-21103` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.8 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Path traversal
- [Use after free in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21102.md)
  `CVE-2026-21102` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21101.md)
  `CVE-2026-21101` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.4 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-20
- [Improper access control in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21100.md)
  `CVE-2026-21100` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.9 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information.](https://agentprime.io/advisories/CVE-2026-21099.md)
  `CVE-2026-21099` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.1 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-280
- [Improper access control in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21098.md)
  `CVE-2026-21098` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.9 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Improper authorization in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21097.md)
  `CVE-2026-21097` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.6 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Heap-based buffer overflow in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21096.md)
  `CVE-2026-21096` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Heap-based buffer overflow in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21095.md)
  `CVE-2026-21095` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21094.md)
  `CVE-2026-21094` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.1 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-20
- [Stack-based buffer overflow in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21093.md)
  `CVE-2026-21093` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.6 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Path traversal in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21092.md)
  `CVE-2026-21092` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.8 High · Not analysed yet · Published 9 Sept 2026 · Tags: Path traversal
- [Out-of-bounds write in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21091.md)
  `CVE-2026-21091` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.4 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Out-of-bounds write in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21090.md)
  `CVE-2026-21090` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.4 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21089.md)
  `CVE-2026-21089` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.9 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-20
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21088.md)
  `CVE-2026-21088` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.9 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-20
- [Out-of-bounds write in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21087.md)
  `CVE-2026-21087` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.6 High · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21086.md)
  `CVE-2026-21086` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.8 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-20
- [Out-of-bounds write in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21085.md)
  `CVE-2026-21085` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.4 High · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity.](https://agentprime.io/advisories/CVE-2026-21073.md)
  `CVE-2026-21073` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.2 Medium · Not analysed yet · Published 10 Aug 2026
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21072.md)
  `CVE-2026-21072` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.1 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-20
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21071.md)
  `CVE-2026-21071` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.1 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-20
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21070.md)
  `CVE-2026-21070` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.1 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-20
- [Incorrect numeric conversion in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21069.md)
  `CVE-2026-21069` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.1 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-681
- [Stack-based buffer overflow in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21068.md)
  `CVE-2026-21068` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.4 High · Not analysed yet · Published 10 Aug 2026 · Tags: Memory corruption
- [Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.](https://agentprime.io/advisories/CVE-2026-21067.md)
  `CVE-2026-21067` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.1 Medium · Not analysed yet · Published 10 Aug 2026
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21066.md)
  `CVE-2026-21066` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.1 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-20
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21065.md)
  `CVE-2026-21065` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.4 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-20
- [Improper access control in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21064.md)
  `CVE-2026-21064` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.0 High · Not analysed yet · Published 10 Aug 2026 · Tags: Broken access control
- [Exported Android component in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21063.md)
  `CVE-2026-21063` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.8 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-926
- [Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.](https://agentprime.io/advisories/CVE-2026-21062.md)
  `CVE-2026-21062` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.8 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-939
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21061.md)
  `CVE-2026-21061` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.0 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-20
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21060.md)
  `CVE-2026-21060` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.7 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-20
- [Exported Android component in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21059.md)
  `CVE-2026-21059` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.9 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-926
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21058.md)
  `CVE-2026-21058` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.9 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-20
- [Out-of-bounds write in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2026-21047.md)
  `CVE-2026-21047` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.3 High · Not analysed yet · Published 28 Jul 2026 · Tags: Memory corruption
- [Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system privilege.](https://agentprime.io/advisories/CVE-2026-21052.md)
  `CVE-2026-21052` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.8 Medium · Not analysed yet · Published 10 Jul 2026
- [Incorrect default permissions in WLAN security prior to SMR Jul-2026 Release 1 allows local attackers to configure TencentWifiSecurity settings.](https://agentprime.io/advisories/CVE-2026-21051.md)
  `CVE-2026-21051` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.1 Medium · Not analysed yet · Published 10 Jul 2026
- [Improper access control in SmartThingsKit prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information.](https://agentprime.io/advisories/CVE-2026-21050.md)
  `CVE-2026-21050` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.1 Medium · Not analysed yet · Published 10 Jul 2026
- [Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary code.](https://agentprime.io/advisories/CVE-2026-21049.md)
  `CVE-2026-21049` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.4 High · Not analysed yet · Published 10 Jul 2026
- [Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory.](https://agentprime.io/advisories/CVE-2026-21048.md)
  `CVE-2026-21048` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.4 High · Not analysed yet · Published 10 Jul 2026
- [Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR Jul-2026 Release 1 allows local privileged attackers to execute arbitrary code.](https://agentprime.io/advisories/CVE-2026-21046.md)
  `CVE-2026-21046` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.4 High · Not analysed yet · Published 10 Jul 2026
- [Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory.](https://agentprime.io/advisories/CVE-2026-21045.md)
  `CVE-2026-21045` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.4 High · Not analysed yet · Published 10 Jul 2026
- [Improper authorization in KnoxGuardManager prior to SMR Jul-2026 Release 1 allows local attackers to bypass the persistence configuration of the application.](https://agentprime.io/advisories/CVE-2026-21044.md)
  `CVE-2026-21044` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.8 Medium · Not analysed yet · Published 10 Jul 2026
- [Path traversal in Wallpaper service prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system server privilege.](https://agentprime.io/advisories/CVE-2026-21043.md)
  `CVE-2026-21043` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.7 Medium · Not analysed yet · Published 10 Jul 2026

Older: <https://agentprime.io/advisories/technology/samsung-mobile-devices.md?cursor=WyIyMDI2LTA3LTEwVDA0OjU4OjA1LjIyMjAwMFoiLCJDVkUtMjAyNi0yMTA0MyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=samsung-mobile-devices>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/samsung-mobile-devices/>. Everything for agents: <https://agentprime.io/llms.txt>.