# Samsung Mobile Devices.

Every CVE that names Samsung Mobile Devices among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Improper authentication in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-25832.md)
  `CVE-2022-25832` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 11 Apr 2022 · Tags: Authentication bypass
- [Improper access control in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-25831.md)
  `CVE-2022-25831` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 2.0 Low · Not analysed yet · Published 11 Apr 2022 · Tags: Broken access control
- [Race condition in Samsung Mobile devices](https://agentprime.io/advisories/CVE-2022-25822.md)
  `CVE-2022-25822` · CVE record: Samsung Mobile Samsung Mobile devices · CVSS 4.0 Medium · Not analysed yet · Published 8 Mar 2022 · Tags: Race condition
- [Out-of-bounds read in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-25821.md)
  `CVE-2022-25821` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 3.3 Low · Not analysed yet · Published 8 Mar 2022 · Tags: Memory corruption
- [Unlimited authentication attempts in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-25820.md)
  `CVE-2022-25820` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.2 Medium · Not analysed yet · Published 8 Mar 2022 · Tags: Authentication bypass
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-25818.md)
  `CVE-2022-25818` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.5 Medium · Not analysed yet · Published 8 Mar 2022 · Tags: CWE-20
- [Improper authentication in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-25817.md)
  `CVE-2022-25817` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 8 Mar 2022 · Tags: Authentication bypass
- [Improper authentication in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-25816.md)
  `CVE-2022-25816` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.1 Medium · Not analysed yet · Published 8 Mar 2022 · Tags: Authentication bypass
- [Incorrect default permissions in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-25815.md)
  `CVE-2022-25815` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.5 Medium · Not analysed yet · Published 8 Mar 2022 · Tags: Broken access control
- [Incorrect default permissions in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-25814.md)
  `CVE-2022-25814` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.5 Medium · Not analysed yet · Published 8 Mar 2022 · Tags: Broken access control
- [Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation before finishing Setup wizard.](https://agentprime.io/advisories/CVE-2022-24932.md)
  `CVE-2022-24932` · CVE record: Samsung Mobile Samsung Mobile Devices and 1 more · CVSS 4.2 Medium · Not analysed yet · Published 8 Mar 2022 · Tags: CWE-424
- [Improper privilege management in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-24931.md)
  `CVE-2022-24931` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.9 High · Not analysed yet · Published 8 Mar 2022 · Tags: Privilege escalation
- [Exported Android component in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-24929.md)
  `CVE-2022-24929` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.1 Medium · Not analysed yet · Published 8 Mar 2022 · Tags: CWE-926
- [Security misconfiguration of RKP in kernel prior to SMR Mar-2022 Release 1 allows a system not to be protected by RKP.](https://agentprime.io/advisories/CVE-2022-24928.md)
  `CVE-2022-24928` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.9 Medium · Not analysed yet · Published 8 Mar 2022 · Tags: CWE-815
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-24925.md)
  `CVE-2022-24925` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.4 Medium · Not analysed yet · Published 11 Feb 2022 · Tags: CWE-20
- [Information disclosure in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-24001.md)
  `CVE-2022-24001` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 3.8 Low · Not analysed yet · Published 11 Feb 2022 · Tags: Information disclosure
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-24000.md)
  `CVE-2022-24000` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 3.9 Low · Not analysed yet · Published 11 Feb 2022 · Tags: CWE-20
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-23999.md)
  `CVE-2022-23999` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 3.9 Low · Not analysed yet · Published 11 Feb 2022 · Tags: CWE-20
- [Out-of-bounds read in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-23429.md)
  `CVE-2022-23429` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.3 Medium · Not analysed yet · Published 11 Feb 2022 · Tags: Memory corruption
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-23427.md)
  `CVE-2022-23427` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 3.9 Low · Not analysed yet · Published 11 Feb 2022 · Tags: CWE-20
- [Code injection in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-23426.md)
  `CVE-2022-23426` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.4 Medium · Not analysed yet · Published 11 Feb 2022 · Tags: Code injection
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-23425.md)
  `CVE-2022-23425` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 8.6 High · Not analysed yet · Published 11 Feb 2022 · Tags: CWE-20
- [Unprotected dynamic receiver in Telecom prior to SMR Feb-2022 Release 1 allows untrusted applications to launch arbitrary activity.](https://agentprime.io/advisories/CVE-2022-22292.md)
  `CVE-2022-22292` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.1 High · Not analysed yet · Published 11 Feb 2022 · Tags: CWE-280
- [Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device.](https://agentprime.io/advisories/CVE-2022-22291.md)
  `CVE-2022-22291` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.5 Medium · Not analysed yet · Published 11 Feb 2022 · Tags: CWE-779
- [Out-of-bounds read in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-22271.md)
  `CVE-2022-22271` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.5 Medium · Not analysed yet · Published 7 Jan 2022 · Tags: Memory corruption
- [Code injection in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-22270.md)
  `CVE-2022-22270` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.4 Medium · Not analysed yet · Published 7 Jan 2022 · Tags: Code injection
- [Improper authorization in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-22269.md)
  `CVE-2022-22269` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 7 Jan 2022 · Tags: Broken access control
- [Improper authorization in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-22272.md)
  `CVE-2022-22272` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 7 Jan 2022 · Tags: Broken access control
- [Improper authorization in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-22267.md)
  `CVE-2022-22267` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 7 Jan 2022 · Tags: Broken access control
- [Improper authorization in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-22268.md)
  `CVE-2022-22268` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.1 Medium · Not analysed yet · Published 7 Jan 2022 · Tags: Broken access control
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-22264.md)
  `CVE-2022-22264` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.7 High · Not analysed yet · Published 7 Jan 2022 · Tags: CWE-20
- [Improper privilege management in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-22266.md)
  `CVE-2022-22266` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 7 Jan 2022 · Tags: Privilege escalation
- [Improper privilege management in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-22263.md)
  `CVE-2022-22263` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 7 Jan 2022 · Tags: Privilege escalation
- [An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.](https://agentprime.io/advisories/CVE-2022-22265.md)
  `CVE-2022-22265` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.0 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 7 Jan 2022 · Tags: CWE-703
- [Information disclosure in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25519.md)
  `CVE-2021-25519` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 8 Dec 2021 · Tags: Information disclosure
- [Buffer overflow in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25518.md)
  `CVE-2021-25518` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.4 Medium · Not analysed yet · Published 8 Dec 2021 · Tags: Memory corruption
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25517.md)
  `CVE-2021-25517` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.7 High · Not analysed yet · Published 8 Dec 2021 · Tags: CWE-20
- [An improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attackers to track locations.](https://agentprime.io/advisories/CVE-2021-25516.md)
  `CVE-2021-25516` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.4 Medium · Not analysed yet · Published 8 Dec 2021 · Tags: CWE-703
- [Improper privilege management in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25515.md)
  `CVE-2021-25515` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 8 Dec 2021 · Tags: Privilege escalation
- [An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive information.](https://agentprime.io/advisories/CVE-2021-25514.md)
  `CVE-2021-25514` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 3.3 Low · Not analysed yet · Published 8 Dec 2021
- [Improper privilege management in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25513.md)
  `CVE-2021-25513` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 2.4 Low · Not analysed yet · Published 8 Dec 2021 · Tags: Privilege escalation
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25512.md)
  `CVE-2021-25512` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.1 Medium · Not analysed yet · Published 8 Dec 2021 · Tags: CWE-20
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25511.md)
  `CVE-2021-25511` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.3 Medium · Not analysed yet · Published 8 Dec 2021 · Tags: CWE-20
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25510.md)
  `CVE-2021-25510` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.3 Medium · Not analysed yet · Published 8 Dec 2021 · Tags: CWE-20
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25503.md)
  `CVE-2021-25503` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.0 Medium · Not analysed yet · Published 5 Nov 2021 · Tags: CWE-20
- [Improper privilege management in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25502.md)
  `CVE-2021-25502` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.9 High · Not analysed yet · Published 5 Nov 2021 · Tags: Privilege escalation
- [Improper access control in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25501.md)
  `CVE-2021-25501` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.7 Medium · Not analysed yet · Published 5 Nov 2021 · Tags: Broken access control
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25500.md)
  `CVE-2021-25500` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.2 High · Not analysed yet · Published 5 Nov 2021 · Tags: CWE-20
- [NULL pointer dereference in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25491.md)
  `CVE-2021-25491` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 2.3 Low · Not analysed yet · Published 6 Oct 2021 · Tags: Memory corruption
- [Improper authentication in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25490.md)
  `CVE-2021-25490` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.0 Medium · Not analysed yet · Published 6 Oct 2021 · Tags: Authentication bypass
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25489.md)
  `CVE-2021-25489` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 3.3 Low · Critical (KEV) · In CISA KEV · Not analysed yet · Published 6 Oct 2021 · Tags: CWE-20
- [Out-of-bounds read in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25488.md)
  `CVE-2021-25488` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.5 Medium · Not analysed yet · Published 6 Oct 2021 · Tags: Memory corruption
- [Out-of-bounds read in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25487.md)
  `CVE-2021-25487` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.3 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 6 Oct 2021 · Tags: Memory corruption
- [Information disclosure in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25486.md)
  `CVE-2021-25486` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 2.5 Low · Not analysed yet · Published 6 Oct 2021 · Tags: Information disclosure
- [Improper input validation in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25485.md)
  `CVE-2021-25485` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.5 High · Not analysed yet · Published 6 Oct 2021 · Tags: CWE-20
- [Improper authentication in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25484.md)
  `CVE-2021-25484` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 6 Oct 2021 · Tags: Authentication bypass
- [Out-of-bounds read in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25483.md)
  `CVE-2021-25483` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 6 Oct 2021 · Tags: Memory corruption
- [SQL injection vulnerabilities in CMFA framework prior to SMR Oct-2021 Release 1 allow untrusted application to overwrite some CMFA framework information.](https://agentprime.io/advisories/CVE-2021-25482.md)
  `CVE-2021-25482` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.9 Medium · Not analysed yet · Published 6 Oct 2021 · Tags: CWE-264
- [Improper check for unusual conditions in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25481.md)
  `CVE-2021-25481` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.4 Medium · Not analysed yet · Published 6 Oct 2021 · Tags: CWE-754
- [Authentication bypass by replay in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25480.md)
  `CVE-2021-25480` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.4 Medium · Not analysed yet · Published 6 Oct 2021 · Tags: Authentication bypass

Newest: <https://agentprime.io/advisories/technology/samsung-mobile-devices.md>
Older: <https://agentprime.io/advisories/technology/samsung-mobile-devices.md?cursor=WyIyMDIxLTEwLTA2VDE3OjA5OjI2LjAwMDAwMFoiLCJDVkUtMjAyMS0yNTQ4MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=samsung-mobile-devices&cursor=WyIyMDIyLTA0LTExVDE5OjM2OjU5LjAwMDAwMFoiLCJDVkUtMjAyMi0yNTgzMyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/samsung-mobile-devices/?cursor=WyIyMDIyLTA0LTExVDE5OjM2OjU5LjAwMDAwMFoiLCJDVkUtMjAyMi0yNTgzMyJd>. Everything for agents: <https://agentprime.io/llms.txt>.