# Samsung Mobile Devices. Every CVE that names Samsung Mobile Devices among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Out-of-bounds read and write in libimagecodec.quram.so prior to SMR Oct-2025 Release 1 allows remote attackers to access out-of-bounds memory.](https://agentprime.io/advisories/CVE-2025-21055.md) `CVE-2025-21055` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.3 Medium · Not analysed yet · Published 10 Oct 2025 - [Out-of-bounds read in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to potentially access out-of-bounds memory.](https://agentprime.io/advisories/CVE-2025-21054.md) `CVE-2025-21054` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 10 Oct 2025 - [Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.](https://agentprime.io/advisories/CVE-2025-21053.md) `CVE-2025-21053` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 10 Oct 2025 - [Out-of-bounds write under specific condition in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.](https://agentprime.io/advisories/CVE-2025-21052.md) `CVE-2025-21052` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 10 Oct 2025 - [Out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to write out-of-bounds memory.](https://agentprime.io/advisories/CVE-2025-21051.md) `CVE-2025-21051` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 10 Oct 2025 - [Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information.](https://agentprime.io/advisories/CVE-2025-21049.md) `CVE-2025-21049` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.5 Medium · Not analysed yet · Published 10 Oct 2025 - [Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to execute arbitrary code.](https://agentprime.io/advisories/CVE-2025-21048.md) `CVE-2025-21048` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.7 Medium · Not analysed yet · Published 10 Oct 2025 - [Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs.](https://agentprime.io/advisories/CVE-2025-21047.md) `CVE-2025-21047` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.2 Medium · Not analysed yet · Published 10 Oct 2025 - [Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list.](https://agentprime.io/advisories/CVE-2025-21046.md) `CVE-2025-21046` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 2.4 Low · Not analysed yet · Published 10 Oct 2025 - [Insecure storage of sensitive information in Galaxy Watch prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information.](https://agentprime.io/advisories/CVE-2025-21045.md) `CVE-2025-21045` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 10 Oct 2025 - [Out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.](https://agentprime.io/advisories/CVE-2025-21044.md) `CVE-2025-21044` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.7 Medium · Not analysed yet · Published 10 Oct 2025 - [Out-of-bounds write in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2025-21043.md) `CVE-2025-21043` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 12 Sept 2025 · Tags: Memory corruption - [Out-of-bounds write in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2025-21042.md) `CVE-2025-21042` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.36 · Not analysed yet · Published 12 Sept 2025 · Tags: Memory corruption - [Improper access control vulnerability in retrieveExternalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows local attacker to access to Proxy information.](https://agentprime.io/advisories/CVE-2022-39888.md) `CVE-2022-39888` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.3 Medium · Not analysed yet · Published 4 Sept 2025 - [Out-of-bounds write in libsavsvc.so prior to SMR Sep-2025 Release 1 allows local attackers to potentially execute arbitrary code.](https://agentprime.io/advisories/CVE-2025-21034.md) `CVE-2025-21034` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 3 Sept 2025 - [Improper access control in ContactProvider prior to SMR Sep-2025 Release 1 allows local attackers to access sensitive information.](https://agentprime.io/advisories/CVE-2025-21033.md) `CVE-2025-21033` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 3 Sept 2025 - [Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions.](https://agentprime.io/advisories/CVE-2025-21032.md) `CVE-2025-21032` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.9 Medium · Not analysed yet · Published 3 Sept 2025 - [Improper access control in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2025-21031.md) `CVE-2025-21031` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.8 Medium · Not analysed yet · Published 3 Sept 2025 · Tags: Broken access control - [Improper handling of insufficient permission in AppPrelaunchManagerService prior to SMR Sep-2025 Release 1 in Chinese Android 15 allows local attackers to execute arbitrary application in the backgro…](https://agentprime.io/advisories/CVE-2025-21030.md) `CVE-2025-21030` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.3 Medium · Not analysed yet · Published 3 Sept 2025 - [Improper handling of insufficient permission in System UI prior to SMR Sep-2025 Release 1 allows local attackers to send arbitrary replies to messages from the cover display.](https://agentprime.io/advisories/CVE-2025-21029.md) `CVE-2025-21029` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 3 Sept 2025 - [Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items.](https://agentprime.io/advisories/CVE-2025-21028.md) `CVE-2025-21028` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.5 Medium · Not analysed yet · Published 3 Sept 2025 - [Improper verification of intent by broadcast receiver in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to temporarily disable the SIM.](https://agentprime.io/advisories/CVE-2025-21027.md) `CVE-2025-21027` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.1 Medium · Not analysed yet · Published 3 Sept 2025 - [Improper handling of insufficient permission in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to interrupt the call.](https://agentprime.io/advisories/CVE-2025-21026.md) `CVE-2025-21026` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 3 Sept 2025 - [Improper access control in MARsExemptionManager prior to SMR Sep-2025 Release 1 allows local attackers to be excluded from background execution management.](https://agentprime.io/advisories/CVE-2025-21025.md) `CVE-2025-21025` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.1 Medium · Not analysed yet · Published 3 Sept 2025 - [Intent redirection vulnerability in SecSettings prior to SMR Apr-2022 Release 1 allows attackers to access arbitrary file with system privilege.](https://agentprime.io/advisories/CVE-2023-21474.md) `CVE-2023-21474` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.3 Medium · Not analysed yet · Published 3 Sept 2025 - [Improper input validation vulnerability in CertByte prior to SMR Apr-2023 Release 1 allows local attackers to launch privileged activities.](https://agentprime.io/advisories/CVE-2023-21480.md) `CVE-2023-21480` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.5 High · Not analysed yet · Published 3 Sept 2025 - [Improper authorization in Smart suggestions prior to SMR Apr-2023 Release 1 in Android 13 and 4.1.01.0 in Android 12 allows remote attackers to register a schedule.](https://agentprime.io/advisories/CVE-2023-21479.md) `CVE-2023-21479` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.3 Medium · Not analysed yet · Published 3 Sept 2025 - [Improper input validation vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data.](https://agentprime.io/advisories/CVE-2023-21478.md) `CVE-2023-21478` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.0 Medium · Not analysed yet · Published 3 Sept 2025 - [Access of Memory Location After End of Buffer vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data.](https://agentprime.io/advisories/CVE-2023-21477.md) `CVE-2023-21477` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.9 High · Not analysed yet · Published 3 Sept 2025 - [Out-of-bounds write in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2023-21476.md) `CVE-2023-21476` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.0 High · Not analysed yet · Published 3 Sept 2025 · Tags: Memory corruption - [Out-of-bounds write in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2023-21475.md) `CVE-2023-21475` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.0 High · Not analysed yet · Published 3 Sept 2025 · Tags: Memory corruption - [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2023-21473.md) `CVE-2023-21473` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.8 Medium · Not analysed yet · Published 3 Sept 2025 · Tags: CWE-20 - [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2023-21472.md) `CVE-2023-21472` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.8 Medium · Not analysed yet · Published 3 Sept 2025 · Tags: CWE-20 - [Improper authentication in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2023-21471.md) `CVE-2023-21471` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 3 Sept 2025 · Tags: Authentication bypass - [Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location information using com.samsung.android.wifi.NETWORK_LOCATION action.](https://agentprime.io/advisories/CVE-2023-21470.md) `CVE-2023-21470` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 3 Sept 2025 - [Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location information using com.samsung.android.wifi.GEOFENCE action.](https://agentprime.io/advisories/CVE-2023-21469.md) `CVE-2023-21469` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 3 Sept 2025 - [Improper access control vulnerability in Telephony prior to SMR Apr-2023 Release 1 allows attackers to access files with escalated permission.](https://agentprime.io/advisories/CVE-2023-21468.md) `CVE-2023-21468` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.9 Medium · Not analysed yet · Published 3 Sept 2025 - [Improper authentication in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2023-21467.md) `CVE-2023-21467` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.6 Medium · Not analysed yet · Published 3 Sept 2025 · Tags: Authentication bypass - [Improper authentication in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2023-21466.md) `CVE-2023-21466` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.3 Medium · Not analysed yet · Published 3 Sept 2025 · Tags: Authentication bypass - [Improper access control in PkgPredictorService prior to SMR Aug-2025 Release 1 in Chinese Android 13, 14, 15 and 16 allows local attackers to use the privileged APIs.](https://agentprime.io/advisories/CVE-2025-21016.md) `CVE-2025-21016` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.3 Medium · Not analysed yet · Published 6 Aug 2025 - [Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to delete file with Document scanner's privilege.](https://agentprime.io/advisories/CVE-2025-21015.md) `CVE-2025-21015` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 6 Aug 2025 - [Improper export of android application component in Emergency SoS prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information.](https://agentprime.io/advisories/CVE-2025-21014.md) `CVE-2025-21014` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.3 Medium · Not analysed yet · Published 6 Aug 2025 - [Improper access control in SemSensorManager for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information related to outdoor exercise and sleep time.](https://agentprime.io/advisories/CVE-2025-21013.md) `CVE-2025-21013` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.2 Medium · Not analysed yet · Published 6 Aug 2025 - [Improper access control in fall detection for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to modify fall detection configuration.](https://agentprime.io/advisories/CVE-2025-21012.md) `CVE-2025-21012` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.5 Medium · Not analysed yet · Published 6 Aug 2025 - [Improper access control in SemSensorService for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information related to motion and body sensors.](https://agentprime.io/advisories/CVE-2025-21011.md) `CVE-2025-21011` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.5 Medium · Not analysed yet · Published 6 Aug 2025 - [Improper privilege management in SamsungAccount prior to SMR Aug-2025 Release 1 allows local privileged attackers to deactivate Samsung account.](https://agentprime.io/advisories/CVE-2025-21010.md) `CVE-2025-21010` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.0 Medium · Not analysed yet · Published 6 Aug 2025 - [Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to access device identifier.](https://agentprime.io/advisories/CVE-2025-20990.md) `CVE-2025-20990` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 6 Aug 2025 - [Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to power off the device.](https://agentprime.io/advisories/CVE-2025-21004.md) `CVE-2025-21004` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.2 Medium · Not analysed yet · Published 8 Jul 2025 - [Insecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows local attackers to access sensitive information.](https://agentprime.io/advisories/CVE-2025-21003.md) `CVE-2025-21003` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 8 Jul 2025 - [Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to manipulate broadcasting Auracast.](https://agentprime.io/advisories/CVE-2025-21002.md) `CVE-2025-21002` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.2 Medium · Not analysed yet · Published 8 Jul 2025 - [Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to stop broadcasting Auracast.](https://agentprime.io/advisories/CVE-2025-21001.md) `CVE-2025-21001` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.2 Medium · Not analysed yet · Published 8 Jul 2025 - [Improper privilege management in Bluetooth prior to SMR Jul-2025 Release 1 allows local attackers to enable Bluetooth.](https://agentprime.io/advisories/CVE-2025-21000.md) `CVE-2025-21000` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.2 Medium · Not analysed yet · Published 8 Jul 2025 - [Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025 Release 1 allows secondary users to access owner's saved Wi-Fi password.](https://agentprime.io/advisories/CVE-2025-20999.md) `CVE-2025-20999` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.1 Medium · Not analysed yet · Published 8 Jul 2025 - [Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number.](https://agentprime.io/advisories/CVE-2025-20998.md) `CVE-2025-20998` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.5 Medium · Not analysed yet · Published 8 Jul 2025 - [Incorrect default permission in Framework for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to reset some configuration of Galaxy Watch.](https://agentprime.io/advisories/CVE-2025-20997.md) `CVE-2025-20997` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.2 Medium · Not analysed yet · Published 8 Jul 2025 - [Out-of-bounds write in checking auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.](https://agentprime.io/advisories/CVE-2025-20983.md) `CVE-2025-20983` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.4 Medium · Not analysed yet · Published 8 Jul 2025 - [Out-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.](https://agentprime.io/advisories/CVE-2025-20982.md) `CVE-2025-20982` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.4 Medium · Not analysed yet · Published 8 Jul 2025 - [Out-of-bounds write in libsecimaging.camera.samsung.so prior to SMR Jun-2025 Release 1 allows local attackers to write out-of-bounds memory.](https://agentprime.io/advisories/CVE-2025-20993.md) `CVE-2025-20993` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 4 Jun 2025 - [Out-of-bound read in libsecimaging.camera.samsung.so prior to SMR Feb-2025 Release 1 allows local attackers to read out-of-bounds memory.](https://agentprime.io/advisories/CVE-2025-20992.md) `CVE-2025-20992` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 4 Jun 2025 - [Improper export of Android application components in Bluetooth prior to SMR Jun-2025 Release 1 allows local attackers to make devices discoverable.](https://agentprime.io/advisories/CVE-2025-20991.md) `CVE-2025-20991` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 4 Jun 2025 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .