# Samsung Mobile Devices. Every CVE that names Samsung Mobile Devices among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Out-of-bounds write vulnerability while decoding hcr of libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code.](https://agentprime.io/advisories/CVE-2024-20846.md) `CVE-2024-20846` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.9 Medium · Not analysed yet · Published 2 Apr 2024 - [Out-of-bounds write vulnerability while releasing memory in libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code.](https://agentprime.io/advisories/CVE-2024-20845.md) `CVE-2024-20845` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.4 High · Not analysed yet · Published 2 Apr 2024 - [Out-of-bounds write vulnerability while parsing remaining codewords in libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code.](https://agentprime.io/advisories/CVE-2024-20844.md) `CVE-2024-20844` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.4 High · Not analysed yet · Published 2 Apr 2024 - [Out-of-bound write vulnerability in command parsing implementation of libIfaaCa prior to SMR Apr-2024 Release 1 allows local privileged attackers to execute arbitrary code.](https://agentprime.io/advisories/CVE-2024-20843.md) `CVE-2024-20843` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.6 Medium · Not analysed yet · Published 2 Apr 2024 - [Improper Input Validation vulnerability in handling apdu of libsec-ril prior to SMR Apr-2024 Release 1 allows local privileged attackers to write out-of-bounds memory.](https://agentprime.io/advisories/CVE-2024-20842.md) `CVE-2024-20842` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.2 Medium · Not analysed yet · Published 2 Apr 2024 - [Use after free vulnerability in pub_crypto_recv_msg prior to SMR Mar-2024 Release 1 due to race condition allows local attackers with system privilege to cause memory corruption.](https://agentprime.io/advisories/CVE-2024-20833.md) `CVE-2024-20833` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.1 Medium · Not analysed yet · Published 5 Mar 2024 - [Out of bounds Read vulnerability in ssmis_get_frm in libsubextractor.so prior to SMR Mar-2024 Release 1 allows local attackers to read out of bounds memory.](https://agentprime.io/advisories/CVE-2024-20836.md) `CVE-2024-20836` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 3.3 Low · Not analysed yet · Published 5 Mar 2024 - [Improper access control vulnerability in CustomFrequencyManagerService prior to SMR Mar-2024 Release 1 allows local attackers to execute privileged behaviors.](https://agentprime.io/advisories/CVE-2024-20835.md) `CVE-2024-20835` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 5 Mar 2024 - [The sensitive information exposure vulnerability in WlanTest prior to SMR Mar-2024 Release 1 allows local attackers to access MAC address without proper permission.](https://agentprime.io/advisories/CVE-2024-20834.md) `CVE-2024-20834` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 3.3 Low · Not analysed yet · Published 5 Mar 2024 - [Heap overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows local privileged attackers to execute arbitrary code.](https://agentprime.io/advisories/CVE-2024-20832.md) `CVE-2024-20832` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.4 Medium · Not analysed yet · Published 5 Mar 2024 - [Stack overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows local privileged attackers to execute arbitrary code.](https://agentprime.io/advisories/CVE-2024-20831.md) `CVE-2024-20831` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.4 Medium · Not analysed yet · Published 5 Mar 2024 - [Incorrect default permission in AppLock prior to SMR MAr-2024 Release 1 allows local attackers to configure AppLock settings.](https://agentprime.io/advisories/CVE-2024-20830.md) `CVE-2024-20830` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.3 Medium · Not analysed yet · Published 5 Mar 2024 - [Improper input validation in IpcTxSndSetLoopbackCtrl in libsec-ril prior to SMR Sep-2023 Release 1 allows local attackers to write out-of-bounds memory.](https://agentprime.io/advisories/CVE-2023-52432.md) `CVE-2023-52432` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.9 Medium · Not analysed yet · Published 5 Mar 2024 - [Improper input validation in bootloader prior to SMR Feb-2024 Release 1 allows local privileged attackers to cause an Out-Of-Bounds read.](https://agentprime.io/advisories/CVE-2024-20820.md) `CVE-2024-20820` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.4 Medium · Not analysed yet · Published 6 Feb 2024 - [Out-of-bounds Write vulnerabilities in svc1td_vld_plh_ap of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.](https://agentprime.io/advisories/CVE-2024-20819.md) `CVE-2024-20819` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.6 Medium · Not analysed yet · Published 6 Feb 2024 - [Out-of-bounds Write vulnerabilities in svc1td_vld_elh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.](https://agentprime.io/advisories/CVE-2024-20818.md) `CVE-2024-20818` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.6 Medium · Not analysed yet · Published 6 Feb 2024 - [Out-of-bounds Write vulnerabilities in svc1td_vld_slh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.](https://agentprime.io/advisories/CVE-2024-20817.md) `CVE-2024-20817` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.6 Medium · Not analysed yet · Published 6 Feb 2024 - [Improper authentication vulnerability in onCharacteristicWriteRequest in Auto Hotspot prior to SMR Feb-2024 Release 1 allows adjacent attackers connect to victim\'s mobile hotspot without user awa…](https://agentprime.io/advisories/CVE-2024-20816.md) `CVE-2024-20816` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.0 High · Not analysed yet · Published 6 Feb 2024 - [Improper authentication vulnerability in onCharacteristicReadRequest in Auto Hotspot prior to SMR Feb-2024 Release 1 allows adjacent attackers connect to victim\'s mobile hotspot without user awar…](https://agentprime.io/advisories/CVE-2024-20815.md) `CVE-2024-20815` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.0 High · Not analysed yet · Published 6 Feb 2024 - [Out-of-bounds Read in padmd_vld_ac_prog_refine of libpadm.so prior to SMR Feb-2024 Release 1 allows local attackers access unauthorized information.](https://agentprime.io/advisories/CVE-2024-20814.md) `CVE-2024-20814` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 6 Feb 2024 - [Out-of-bounds write in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2024-20813.md) `CVE-2024-20813` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.4 High · Not analysed yet · Published 6 Feb 2024 · Tags: Memory corruption - [Out-of-bounds write in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2024-20812.md) `CVE-2024-20812` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.4 High · Not analysed yet · Published 6 Feb 2024 · Tags: Memory corruption - [Improper caller verification in GameOptimizer prior to SMR Feb-2024 Release 1 allows local attackers to configure GameOptimizer.](https://agentprime.io/advisories/CVE-2024-20811.md) `CVE-2024-20811` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.1 Medium · Not analysed yet · Published 6 Feb 2024 - [Implicit intent hijacking vulnerability in Smart Suggestions prior to SMR Feb-2024 Release 1 allows local attackers to get sensitive information.](https://agentprime.io/advisories/CVE-2024-20810.md) `CVE-2024-20810` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 3.3 Low · Not analysed yet · Published 6 Feb 2024 - [Improper access control in Notification service prior to SMR Jan-2024 Release 1 allows local attacker to access notification data.](https://agentprime.io/advisories/CVE-2024-20806.md) `CVE-2024-20806` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.2 Medium · Not analysed yet · Published 4 Jan 2024 - [Path traversal in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2024-20805.md) `CVE-2024-20805` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 3.3 Low · Not analysed yet · Published 4 Jan 2024 · Tags: Path traversal - [Path traversal vulnerability in FileUriConverter of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrar…](https://agentprime.io/advisories/CVE-2024-20804.md) `CVE-2024-20804` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 4 Jan 2024 - [Improper authentication vulnerability in Bluetooth pairing process prior to SMR Jan-2024 Release 1 allows remote attackers to establish pairing process without user interaction.](https://agentprime.io/advisories/CVE-2024-20803.md) `CVE-2024-20803` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.8 Medium · Not analysed yet · Published 4 Jan 2024 - [Improper access control vulnerability in Samsung DeX prior to SMR Jan-2024 Release 1 allows owner to access other users\' notification in a multi-user environment.](https://agentprime.io/advisories/CVE-2024-20802.md) `CVE-2024-20802` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.6 Medium · Not analysed yet · Published 4 Jan 2024 - [Integer overflow vulnerability in landmarkCopyImageToNative of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow.](https://agentprime.io/advisories/CVE-2023-42563.md) `CVE-2023-42563` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.7 Medium · Not analysed yet · Published 5 Dec 2023 - [Improper access control vulnerability in KnoxCustomManagerService prior to SMR Dec-2023 Release 1 allows attacker to access device SIM PIN.](https://agentprime.io/advisories/CVE-2023-42570.md) `CVE-2023-42570` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.9 Medium · Not analysed yet · Published 5 Dec 2023 - [Improper authorization verification vulnerability in AR Emoji prior to SMR Dec-2023 Release 1 allows attackers to read sandbox data of AR Emoji.](https://agentprime.io/advisories/CVE-2023-42569.md) `CVE-2023-42569` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 5 Dec 2023 - [Improper access control vulnerability in SmartManagerCN prior to SMR Dec-2023 Release 1 allows local attackers to access arbitrary files with system privilege.](https://agentprime.io/advisories/CVE-2023-42568.md) `CVE-2023-42568` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.3 High · Not analysed yet · Published 5 Dec 2023 - [Improper size check vulnerability in softsimd prior to SMR Dec-2023 Release 1 allows stack-based buffer overflow.](https://agentprime.io/advisories/CVE-2023-42567.md) `CVE-2023-42567` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.3 High · Not analysed yet · Published 5 Dec 2023 - [Out-of-bound write vulnerability in libsavsvc prior to SMR Dec-2023 Release 1 allows local attackers to execute arbitrary code.](https://agentprime.io/advisories/CVE-2023-42566.md) `CVE-2023-42566` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.3 High · Not analysed yet · Published 5 Dec 2023 - [Improper input validation vulnerability in Smart Clip prior to SMR Dec-2023 Release 1 allows local attackers with shell privilege to execute arbitrary code.](https://agentprime.io/advisories/CVE-2023-42565.md) `CVE-2023-42565` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.3 High · Not analysed yet · Published 5 Dec 2023 - [Improper access control in knoxcustom service prior to SMR Dec-2023 Release 1 allows attacker to send broadcast with system privilege.](https://agentprime.io/advisories/CVE-2023-42564.md) `CVE-2023-42564` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.6 Medium · Not analysed yet · Published 5 Dec 2023 - [Integer overflow vulnerability in detectionFindFaceSupportMultiInstance of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow.](https://agentprime.io/advisories/CVE-2023-42562.md) `CVE-2023-42562` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.7 Medium · Not analysed yet · Published 5 Dec 2023 - [Heap out-of-bounds write vulnerability in bootloader prior to SMR Dec-2023 Release 1 allows a physical attacker to execute arbitrary code.](https://agentprime.io/advisories/CVE-2023-42561.md) `CVE-2023-42561` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.1 High · Not analysed yet · Published 5 Dec 2023 - [Heap out-of-bounds write vulnerability in dec_mono_audb of libsavsac.so prior to SMR Dec-2023 Release 1 allows an attacker to execute arbitrary code.](https://agentprime.io/advisories/CVE-2023-42560.md) `CVE-2023-42560` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.4 High · Not analysed yet · Published 5 Dec 2023 - [Improper exception management vulnerability in Knox Guard prior to SMR Dec-2023 Release 1 allows Knox Guard lock bypass via changing system time.](https://agentprime.io/advisories/CVE-2023-42559.md) `CVE-2023-42559` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.9 Medium · Not analysed yet · Published 5 Dec 2023 - [Out of bounds write vulnerability in HDCP in HAL prior to SMR Dec-2023 Release 1 allows attacker to perform code execution.](https://agentprime.io/advisories/CVE-2023-42558.md) `CVE-2023-42558` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.0 Medium · Not analysed yet · Published 5 Dec 2023 - [Out-of-bound write vulnerability in libIfaaCa prior to SMR Dec-2023 Release 1 allows local system attackers to execute arbitrary code.](https://agentprime.io/advisories/CVE-2023-42557.md) `CVE-2023-42557` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.6 Medium · Not analysed yet · Published 5 Dec 2023 - [Improper usage of implicit intent in Contacts prior to SMR Dec-2023 Release 1 allows attacker to get sensitive information.](https://agentprime.io/advisories/CVE-2023-42556.md) `CVE-2023-42556` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 3.3 Low · Not analysed yet · Published 5 Dec 2023 - [An improper input validation in saped_rec_silence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.](https://agentprime.io/advisories/CVE-2023-42538.md) `CVE-2023-42538` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.9 Medium · Not analysed yet · Published 7 Nov 2023 - [An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.](https://agentprime.io/advisories/CVE-2023-42537.md) `CVE-2023-42537` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.4 High · Not analysed yet · Published 7 Nov 2023 - [An improper input validation in saped_dec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.](https://agentprime.io/advisories/CVE-2023-42536.md) `CVE-2023-42536` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.4 High · Not analysed yet · Published 7 Nov 2023 - [Out-of-bounds Write in read_block of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code.](https://agentprime.io/advisories/CVE-2023-42535.md) `CVE-2023-42535` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.4 High · Not analysed yet · Published 7 Nov 2023 - [Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to read arbitrary files with system privilege.](https://agentprime.io/advisories/CVE-2023-42534.md) `CVE-2023-42534` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.3 Medium · Not analysed yet · Published 7 Nov 2023 - [Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execute arbitrary code in Kernel.](https://agentprime.io/advisories/CVE-2023-42533.md) `CVE-2023-42533` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.6 Medium · Not analysed yet · Published 7 Nov 2023 - [Improper Certificate Validation in FotaAgent prior to SMR Nov-2023 Release1 allows remote attacker to intercept the network traffic including Firmware information.](https://agentprime.io/advisories/CVE-2023-42532.md) `CVE-2023-42532` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.9 Medium · Not analysed yet · Published 7 Nov 2023 - [Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass restrictions on starting activities from the background.](https://agentprime.io/advisories/CVE-2023-42531.md) `CVE-2023-42531` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.2 Medium · Not analysed yet · Published 7 Nov 2023 - [Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct without User Interaction.](https://agentprime.io/advisories/CVE-2023-42530.md) `CVE-2023-42530` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.7 Medium · Not analysed yet · Published 7 Nov 2023 - [Out-of-bound write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to execute arbitrary code.](https://agentprime.io/advisories/CVE-2023-42529.md) `CVE-2023-42529` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.7 Medium · Not analysed yet · Published 7 Nov 2023 - [Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code.](https://agentprime.io/advisories/CVE-2023-42528.md) `CVE-2023-42528` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.7 Medium · Not analysed yet · Published 7 Nov 2023 - [Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to expose sensitive information.](https://agentprime.io/advisories/CVE-2023-42527.md) `CVE-2023-42527` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.6 Medium · Not analysed yet · Published 7 Nov 2023 - [Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code.](https://agentprime.io/advisories/CVE-2023-30739.md) `CVE-2023-30739` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.7 Medium · Not analysed yet · Published 7 Nov 2023 - [Stack-based Buffer Overflow in vulnerability HDCP trustlet prior to SMR Oct-2023 Release 1 allows local privileged attackers to perform code execution.](https://agentprime.io/advisories/CVE-2023-30733.md) `CVE-2023-30733` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.8 High · Not analysed yet · Published 4 Oct 2023 - [Improper access control in system property prior to SMR Oct-2023 Release 1 allows local attacker to get CPU serial number.](https://agentprime.io/advisories/CVE-2023-30732.md) `CVE-2023-30732` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.5 Medium · Not analysed yet · Published 4 Oct 2023 - [Logic error in package installation via debugger command prior to SMR Oct-2023 Release 1 allows physical attacker to install an application that has different build type.](https://agentprime.io/advisories/CVE-2023-30731.md) `CVE-2023-30731` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.7 Medium · Not analysed yet · Published 4 Oct 2023 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .