# Samsung Mobile Devices.

Every CVE that names Samsung Mobile Devices among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Improper access control in SmartThingsService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.](https://agentprime.io/advisories/CVE-2024-34606.md)
  `CVE-2024-34606` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.2 Medium · Not analysed yet · Published 7 Aug 2024
- [Improper access control in SamsungHealthService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.](https://agentprime.io/advisories/CVE-2024-34605.md)
  `CVE-2024-34605` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.2 Medium · Not analysed yet · Published 7 Aug 2024
- [Improper access control in LedCoverService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.](https://agentprime.io/advisories/CVE-2024-34604.md)
  `CVE-2024-34604` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.2 Medium · Not analysed yet · Published 7 Aug 2024
- [Improper access control in Samsung Message prior to SMR Jul-2024 Release 1 allows local attackers to access location data.](https://agentprime.io/advisories/CVE-2024-34603.md)
  `CVE-2024-34603` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 8 Jul 2024
- [Use of implicit intent for sensitive communication in Samsung Messages prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.](https://agentprime.io/advisories/CVE-2024-34602.md)
  `CVE-2024-34602` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 3.3 Low · Not analysed yet · Published 8 Jul 2024
- [Improper access control in clickAdapterItem of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities.](https://agentprime.io/advisories/CVE-2024-34595.md)
  `CVE-2024-34595` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.8 High · Not analysed yet · Published 2 Jul 2024
- [Exposure of sensitive information in proc file system prior to SMR Jul-2024 Release 1 allows local attackers to read kernel memory address.](https://agentprime.io/advisories/CVE-2024-34594.md)
  `CVE-2024-34594` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.5 Medium · Not analysed yet · Published 2 Jul 2024
- [Improper input validation in parsing and distributing RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege.](https://agentprime.io/advisories/CVE-2024-34593.md)
  `CVE-2024-34593` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.5 High · Not analysed yet · Published 2 Jul 2024
- [Improper input validation in parsing RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service.](https://agentprime.io/advisories/CVE-2024-34592.md)
  `CVE-2024-34592` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.3 Medium · Not analysed yet · Published 2 Jul 2024
- [Improper input validation in parsing an item data from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service.](https://agentprime.io/advisories/CVE-2024-34591.md)
  `CVE-2024-34591` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.3 Medium · Not analysed yet · Published 2 Jul 2024
- [Improper input validation혻in parsing an item type from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service.](https://agentprime.io/advisories/CVE-2024-34590.md)
  `CVE-2024-34590` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.3 Medium · Not analysed yet · Published 2 Jul 2024
- [Improper input validation in parsing RTCP RR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service.](https://agentprime.io/advisories/CVE-2024-34589.md)
  `CVE-2024-34589` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.3 Medium · Not analysed yet · Published 2 Jul 2024
- [Improper input validation혻in parsing RTCP SR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service.](https://agentprime.io/advisories/CVE-2024-34588.md)
  `CVE-2024-34588` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.3 Medium · Not analysed yet · Published 2 Jul 2024
- [Improper input validation in parsing application information from RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege.](https://agentprime.io/advisories/CVE-2024-34587.md)
  `CVE-2024-34587` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.5 High · Not analysed yet · Published 2 Jul 2024
- [Improper access control in KnoxCustomManagerService prior to SMR Jul-2024 Release 1 allows local attackers to configure Knox privacy policy.](https://agentprime.io/advisories/CVE-2024-34586.md)
  `CVE-2024-34586` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.9 Medium · Not analysed yet · Published 2 Jul 2024
- [Improper access control in launchApp of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities.](https://agentprime.io/advisories/CVE-2024-34585.md)
  `CVE-2024-34585` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.8 High · Not analysed yet · Published 2 Jul 2024
- [Improper access control in system property prior to SMR Jul-2024 Release 1 allows local attackers to get device identifier.](https://agentprime.io/advisories/CVE-2024-34583.md)
  `CVE-2024-34583` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 2 Jul 2024
- [Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local attackers to write out-of-bounds memory.](https://agentprime.io/advisories/CVE-2024-20901.md)
  `CVE-2024-20901` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.9 Medium · Not analysed yet · Published 2 Jul 2024
- [Improper authentication in MTP application prior to SMR Jul-2024 Release 1 allows local attackers to enter MTP mode without proper authentication.](https://agentprime.io/advisories/CVE-2024-20900.md)
  `CVE-2024-20900` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 2 Jul 2024
- [Use of implicit intent for sensitive communication in RCS function in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.](https://agentprime.io/advisories/CVE-2024-20899.md)
  `CVE-2024-20899` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 2 Jul 2024
- [Use of implicit intent for sensitive communication in SoftphoneClient in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.](https://agentprime.io/advisories/CVE-2024-20898.md)
  `CVE-2024-20898` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 2 Jul 2024
- [Use of implicit intent for sensitive communication in FCM function in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.](https://agentprime.io/advisories/CVE-2024-20897.md)
  `CVE-2024-20897` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 2 Jul 2024
- [Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.](https://agentprime.io/advisories/CVE-2024-20896.md)
  `CVE-2024-20896` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.5 Medium · Not analysed yet · Published 2 Jul 2024
- [Improper access control in Dar service prior to SMR Jul-2024 Release 1 allows local attackers to bypass restriction for calling SDP features.](https://agentprime.io/advisories/CVE-2024-20895.md)
  `CVE-2024-20895` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.7 High · Not analysed yet · Published 2 Jul 2024
- [Improper handling of exceptional conditions in Secure Folder prior to SMR Jul-2024 Release 1 allows physical attackers to bypass authentication under certain condition.](https://agentprime.io/advisories/CVE-2024-20894.md)
  `CVE-2024-20894` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.3 Medium · Not analysed yet · Published 2 Jul 2024
- [Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows local attackers to trigger memory corruption.](https://agentprime.io/advisories/CVE-2024-20893.md)
  `CVE-2024-20893` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.1 Medium · Not analysed yet · Published 2 Jul 2024
- [Improper verification of signature in FilterProvider prior to SMR Jul-2024 Release 1 allows local attackers to execute privileged behaviors.](https://agentprime.io/advisories/CVE-2024-20892.md)
  `CVE-2024-20892` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.5 Medium · Not analysed yet · Published 2 Jul 2024
- [Improper access control in launchFullscreenIntent of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities.](https://agentprime.io/advisories/CVE-2024-20891.md)
  `CVE-2024-20891` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.8 High · Not analysed yet · Published 2 Jul 2024
- [Improper input validation in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to trigger abnormal behavior.](https://agentprime.io/advisories/CVE-2024-20890.md)
  `CVE-2024-20890` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.3 Medium · Not analysed yet · Published 2 Jul 2024
- [Improper authentication in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to pair with devices.](https://agentprime.io/advisories/CVE-2024-20889.md)
  `CVE-2024-20889` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.9 Medium · Not analysed yet · Published 2 Jul 2024
- [Improper access control in OneUIHome prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities.](https://agentprime.io/advisories/CVE-2024-20888.md)
  `CVE-2024-20888` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.8 High · Not analysed yet · Published 2 Jul 2024
- [Improper component protection vulnerability in Samsung Dialer prior to SMR May-2024 Release 1 allows local attackers to make a call without proper permission.](https://agentprime.io/advisories/CVE-2024-20885.md)
  `CVE-2024-20885` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.1 Medium · Not analysed yet · Published 4 Jun 2024
- [Incorrect use of privileged API vulnerability in getSemBatteryUsageStats in BatteryStatsService prior to SMR Jun-2024 Release 1 allows local attackers to use privileged API.](https://agentprime.io/advisories/CVE-2024-20884.md)
  `CVE-2024-20884` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.2 Medium · Not analysed yet · Published 4 Jun 2024
- [Incorrect use of privileged API vulnerability in registerBatteryStatsCallback in BatteryStatsService prior to SMR Jun-2024 Release 1 allows local attackers to use privileged API.](https://agentprime.io/advisories/CVE-2024-20883.md)
  `CVE-2024-20883` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.2 Medium · Not analysed yet · Published 4 Jun 2024
- [Out-of-bounds read vulnerability in bootloader prior to SMR June-2024 Release 1 allows physical attackers to arbitrary data access.](https://agentprime.io/advisories/CVE-2024-20882.md)
  `CVE-2024-20882` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.6 Medium · Not analysed yet · Published 4 Jun 2024
- [Improper input validation vulnerability in chnactiv TA prior to SMR Jun-2024 Release 1 allows local privileged attackers lead to potential arbitrary code execution.](https://agentprime.io/advisories/CVE-2024-20881.md)
  `CVE-2024-20881` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.4 Medium · Not analysed yet · Published 4 Jun 2024
- [Stack-based buffer overflow vulnerability in bootloader prior to SMR Jun-2024 Release 1 allows physical attackers to overwrite memory.](https://agentprime.io/advisories/CVE-2024-20880.md)
  `CVE-2024-20880` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.4 Medium · Not analysed yet · Published 4 Jun 2024
- [Improper input validation vulnerability in libsavscmn.so prior to SMR Jun-2024 Release 1 allows local attackers to write out-of-bounds memory.](https://agentprime.io/advisories/CVE-2024-20879.md)
  `CVE-2024-20879` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 4 Jun 2024
- [Heap out-of-bound write vulnerability in parsing grid image in libsavscmn.so prior to SMR June-2024 Release 1 allows local attackers to execute arbitrary code.](https://agentprime.io/advisories/CVE-2024-20878.md)
  `CVE-2024-20878` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.3 High · Not analysed yet · Published 4 Jun 2024
- [Heap out-of-bound write vulnerability in parsing grid image header in libsavscmn.so prior to SMR Jun-2024 Release 1 allows local attackers to execute arbitrary code.](https://agentprime.io/advisories/CVE-2024-20877.md)
  `CVE-2024-20877` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.3 High · Not analysed yet · Published 4 Jun 2024
- [Improper input validation in libsheifdecadapter.so prior to SMR Jun-2024 Release 1 allows local attackers to lead to memory corruption.](https://agentprime.io/advisories/CVE-2024-20876.md)
  `CVE-2024-20876` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.1 Medium · Not analysed yet · Published 4 Jun 2024
- [Improper caller verification vulnerability in SemClipboard prior to SMR June-2024 Release 1 allows local attackers to access arbitrary files.](https://agentprime.io/advisories/CVE-2024-20875.md)
  `CVE-2024-20875` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 4 Jun 2024
- [Improper access control vulnerability in SmartManagerCN prior to SMR Jun-2024 Release 1 allows local attackers to launch privileged activities.](https://agentprime.io/advisories/CVE-2024-20874.md)
  `CVE-2024-20874` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.9 High · Not analysed yet · Published 4 Jun 2024
- [Improper input validation vulnerability in caminfo driver prior to SMR Jun-2024 Release 1 allows local privileged attackers to write out-of-bounds memory.](https://agentprime.io/advisories/CVE-2024-20873.md)
  `CVE-2024-20873` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.2 Medium · Not analysed yet · Published 4 Jun 2024
- [Improper access control vulnerability in multitasking framework prior to SMR May-2024 Release 1 allows physical attackers to access unlocked screen for a while.](https://agentprime.io/advisories/CVE-2024-20855.md)
  `CVE-2024-20855` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 2.4 Low · Not analysed yet · Published 7 May 2024
- [Authentication bypass vulnerability in Setupwizard prior to SMR May-2024 Release 1 allows physical attackers to skip activation step.](https://agentprime.io/advisories/CVE-2024-20866.md)
  `CVE-2024-20866` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.7 Medium · Not analysed yet · Published 7 May 2024
- [Authentication bypass in bootloader prior to SMR May-2024 Release 1 allows physical attackers to flash arbitrary images.](https://agentprime.io/advisories/CVE-2024-20865.md)
  `CVE-2024-20865` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.6 Medium · Not analysed yet · Published 7 May 2024
- [Improper access control vulnerability in DarManagerService prior to SMR May-2024 Release 1 allows local attackers to monitor system resources.](https://agentprime.io/advisories/CVE-2024-20864.md)
  `CVE-2024-20864` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.5 Medium · Not analysed yet · Published 7 May 2024
- [Out of bounds write vulnerability in SNAP in HAL prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code.](https://agentprime.io/advisories/CVE-2024-20863.md)
  `CVE-2024-20863` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.7 Medium · Not analysed yet · Published 7 May 2024
- [Out-of-bounds write in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code.](https://agentprime.io/advisories/CVE-2024-20862.md)
  `CVE-2024-20862` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.0 Medium · Not analysed yet · Published 7 May 2024
- [Use after free vulnerability in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to cause memory corruption.](https://agentprime.io/advisories/CVE-2024-20861.md)
  `CVE-2024-20861` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.0 Medium · Not analysed yet · Published 7 May 2024
- [Improper export of android application components vulnerability in TelephonyUI prior to SMR May-2024 Release 1 allows local attackers to reboot the device without proper permission.](https://agentprime.io/advisories/CVE-2024-20860.md)
  `CVE-2024-20860` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 7 May 2024
- [Improper access control vulnerability in FactoryCamera prior to SMR May-2024 Release 1 allows local attackers to take pictures without privilege.](https://agentprime.io/advisories/CVE-2024-20859.md)
  `CVE-2024-20859` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.5 Medium · Not analysed yet · Published 7 May 2024
- [Improper access control vulnerability in setCocktailHostCallbacks of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to access information of current application.](https://agentprime.io/advisories/CVE-2024-20858.md)
  `CVE-2024-20858` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 7 May 2024
- [Improper access control vulnerability in startListening of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to access information of current application.](https://agentprime.io/advisories/CVE-2024-20857.md)
  `CVE-2024-20857` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 7 May 2024
- [Improper Authentication vulnerability in Secure Folder prior to SMR May-2024 Release 1 allows physical attackers to access Secure Folder without proper authentication in a specific scenario.](https://agentprime.io/advisories/CVE-2024-20856.md)
  `CVE-2024-20856` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.3 Medium · Not analysed yet · Published 7 May 2024
- [A vulnerability possible to reconfigure OTP allows local attackers to transit RMA(Return Merchandise Authorization) mode, which disables security features.](https://agentprime.io/advisories/CVE-2024-20821.md)
  `CVE-2024-20821` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.4 Medium · Not analysed yet · Published 7 May 2024
- [Out-of-bound Write vulnerability in chunk parsing implementation of libsdffextractor prior to SMR Apr-2023 Release 1 allows local attackers to execute arbitrary code.](https://agentprime.io/advisories/CVE-2024-20849.md)
  `CVE-2024-20849` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.3 High · Not analysed yet · Published 2 Apr 2024
- [Improper Input Validation vulnerability in text parsing implementation of libsdffextractor prior to SMR Apr-2024 Release 1 allows local attackers to write out-of-bounds memory.](https://agentprime.io/advisories/CVE-2024-20848.md)
  `CVE-2024-20848` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.1 Medium · Not analysed yet · Published 2 Apr 2024
- [Improper Access Control vulnerability in StorageManagerService prior to SMR Apr-2024 Release 1 allows local attackers to read sdcard information.](https://agentprime.io/advisories/CVE-2024-20847.md)
  `CVE-2024-20847` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 2 Apr 2024

Newest: <https://agentprime.io/advisories/technology/samsung-mobile-devices.md>
Older: <https://agentprime.io/advisories/technology/samsung-mobile-devices.md?cursor=WyIyMDI0LTA0LTAyVDAyOjU5OjQzLjEyMjAwMFoiLCJDVkUtMjAyNC0yMDg0NyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=samsung-mobile-devices&cursor=WyIyMDI0LTA4LTA3VDAxOjI5OjU2Ljk4MzAwMFoiLCJDVkUtMjAyNC0zNDYwNyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/samsung-mobile-devices/?cursor=WyIyMDI0LTA4LTA3VDAxOjI5OjU2Ljk4MzAwMFoiLCJDVkUtMjAyNC0zNDYwNyJd>. Everything for agents: <https://agentprime.io/llms.txt>.