# Samsung Mobile Devices.

Every CVE that names Samsung Mobile Devices among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Improper authorization in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25382.md)
  `CVE-2021-25382` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.1 Medium · Not analysed yet · Published 23 Apr 2021 · Tags: Broken access control
- [Improper privilege management in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25365.md)
  `CVE-2021-25365` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.9 Medium · Not analysed yet · Published 9 Apr 2021 · Tags: Privilege escalation
- [Information disclosure in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25364.md)
  `CVE-2021-25364` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 9 Apr 2021 · Tags: Information disclosure
- [Improper privilege management in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25363.md)
  `CVE-2021-25363` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.8 Medium · Not analysed yet · Published 9 Apr 2021 · Tags: Privilege escalation
- [Improper privilege management in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25362.md)
  `CVE-2021-25362` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.8 Medium · Not analysed yet · Published 9 Apr 2021 · Tags: Privilege escalation
- [Path traversal in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25361.md)
  `CVE-2021-25361` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.9 High · Not analysed yet · Published 9 Apr 2021 · Tags: Path traversal
- [Heap-based buffer overflow in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25360.md)
  `CVE-2021-25360` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Apr 2021 · Tags: Memory corruption
- [Improper access control in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25359.md)
  `CVE-2021-25359` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 9 Apr 2021 · Tags: Broken access control
- [Plaintext password storage in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25358.md)
  `CVE-2021-25358` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 9 Apr 2021 · Tags: CWE-256
- [Information disclosure in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25357.md)
  `CVE-2021-25357` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.6 Medium · Not analysed yet · Published 9 Apr 2021 · Tags: Information disclosure
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25356.md)
  `CVE-2021-25356` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.1 High · Not analysed yet · Published 9 Apr 2021 · Tags: CWE-20
- [An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.](https://agentprime.io/advisories/CVE-2021-25372.md)
  `CVE-2021-25372` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.1 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 26 Mar 2021 · Tags: CWE-703
- [A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.](https://agentprime.io/advisories/CVE-2021-25371.md)
  `CVE-2021-25371` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.1 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 26 Mar 2021 · Tags: CWE-912
- [An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic.](https://agentprime.io/advisories/CVE-2021-25370.md)
  `CVE-2021-25370` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.1 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 26 Mar 2021 · Tags: CWE-703
- [Information disclosure in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25369.md)
  `CVE-2021-25369` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.2 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 26 Mar 2021 · Tags: Information disclosure
- [A possible arbitrary memory overwrite vulnerabilities in quram library version prior to SMR Jan-2021 Release 1 allow arbitrary code execution.](https://agentprime.io/advisories/CVE-2021-25346.md)
  `CVE-2021-25346` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.1 High · Not analysed yet · Published 4 Mar 2021
- [Improper authentication in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25347.md)
  `CVE-2021-25347` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.3 Medium · Not analysed yet · Published 4 Mar 2021 · Tags: Authentication bypass
- [Graphic format mismatch while converting video format in hwcomposer prior to SMR Mar-2021 Release 1 results in kernel panic due to unsupported format.](https://agentprime.io/advisories/CVE-2021-25345.md)
  `CVE-2021-25345` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 4 Mar 2021
- [Missing permission check in knox_custom service prior to SMR Mar-2021 Release 1 allows attackers to gain access to device's serial number without permission.](https://agentprime.io/advisories/CVE-2021-25344.md)
  `CVE-2021-25344` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.2 Medium · Not analysed yet · Published 4 Mar 2021
- [Improper access control in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25340.md)
  `CVE-2021-25340` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.1 Medium · Not analysed yet · Published 4 Mar 2021 · Tags: Broken access control
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25339.md)
  `CVE-2021-25339` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.4 Medium · Not analysed yet · Published 4 Mar 2021 · Tags: CWE-20
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25338.md)
  `CVE-2021-25338` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.4 Medium · Not analysed yet · Published 4 Mar 2021 · Tags: CWE-20
- [Improper privilege management in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25337.md)
  `CVE-2021-25337` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.4 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 4 Mar 2021 · Tags: Privilege escalation
- [Improper privilege management in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25336.md)
  `CVE-2021-25336` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 2.8 Low · Not analysed yet · Published 4 Mar 2021 · Tags: Privilege escalation
- [Samsung Mobile Devices: Improper lockscreen status check in cocktailbar service in Samsung mobile devices prior…](https://agentprime.io/advisories/CVE-2021-25335.md)
  `CVE-2021-25335` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 2.5 Low · Not analysed yet · Published 4 Mar 2021 · Tags: CWE-703
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25334.md)
  `CVE-2021-25334` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.5 Medium · Not analysed yet · Published 4 Mar 2021 · Tags: CWE-20
- [Calling of non-existent provider in MobileWips application prior to SMR Feb-2021 Release 1 allows unauthorized actions including denial of service attack by hijacking the provider.](https://agentprime.io/advisories/CVE-2021-25330.md)
  `CVE-2021-25330` · CVE record: Samsung Mobile Devices · No CVSS score · Not analysed yet · Published 2 Mar 2021

Newest: <https://agentprime.io/advisories/technology/samsung-mobile-devices.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=samsung-mobile-devices&cursor=WyIyMDIxLTA2LTExVDE0OjMzOjQ0LjAwMDAwMFoiLCJDVkUtMjAyMS0yNTQwNyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/samsung-mobile-devices/?cursor=WyIyMDIxLTA2LTExVDE0OjMzOjQ0LjAwMDAwMFoiLCJDVkUtMjAyMS0yNTQwNyJd>. Everything for agents: <https://agentprime.io/llms.txt>.