Advisories · Technology
Samsung Mobile Devices.
Every CVE that names Samsung Mobile Devices among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.
- Samsung Mobile Devices
- CVSS 8.6 High
Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
- CVSS 8.6 High
Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
- CVSS 6.7 Medium
Improper privilege management in Samsung Mobile Devices
- Samsung Mobile Devices
- Privilege escalation
- CVSS 7.0 High
Out-of-bounds write in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 6.9 Medium
Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs.
- Samsung Mobile Devices
- CWE-280
- CVSS 8.9 High
Use after free in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 4.8 Medium
Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory.
- Samsung Mobile Devices
- CVSS 6.9 Medium
Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
- CVSS 5.1 Medium
Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
- CVSS 5.1 Medium
Out-of-bounds write in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 5.1 Medium
Out-of-bounds write in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 7.0 High
Out-of-bounds write in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 6.9 Medium
Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications.
- Samsung Mobile Devices
- CVSS 7.1 High
Heap-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 6.8 Medium
Path traversal in Samsung Mobile Devices
- Samsung Mobile Devices
- Path traversal
- CVSS 9.3 CriticalCritical · CVSS 9+
Use after free in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 8.4 High
Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
- CVSS 6.9 Medium
Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
- CVSS 5.1 Medium
Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information.
- Samsung Mobile Devices
- CWE-280
- CVSS 6.9 Medium
Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
- CVSS 4.6 Medium
Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
- CVSS 9.2 CriticalCritical · CVSS 9+
Heap-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 9.2 CriticalCritical · CVSS 9+
Heap-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 6.1 Medium
Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
- CVSS 5.6 Medium
Stack-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 8.8 High
Path traversal in Samsung Mobile Devices
- Samsung Mobile Devices
- Path traversal
- CVSS 4.4 Medium
Out-of-bounds write in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 4.4 Medium
Out-of-bounds write in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 6.9 Medium
Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
- CVSS 6.9 Medium
Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
- CVSS 8.6 High
Out-of-bounds write in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 4.8 Medium
Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
- CVSS 8.4 High
Out-of-bounds write in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 5.2 Medium
Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity.
- Samsung Mobile Devices
- CVSS 5.1 Medium
Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
- CVSS 5.1 Medium
Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
- CVSS 5.1 Medium
Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
- CVSS 5.1 Medium
Incorrect numeric conversion in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-681
- CVSS 8.4 High
Stack-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 5.1 Medium
Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
- Samsung Mobile Devices
- CVSS 5.1 Medium
Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
- CVSS 4.4 Medium
Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
- CVSS 7.0 High
Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
- CVSS 6.8 Medium
Exported Android component in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-926
- CVSS 4.8 Medium
Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.
- Samsung Mobile Devices
- CWE-939
- CVSS 6.0 Medium
Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
- CVSS 6.7 Medium
Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
- CVSS 6.9 Medium
Exported Android component in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-926
- CVSS 6.9 Medium
Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
- CVSS 8.3 High
Out-of-bounds write in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
- CVSS 6.8 Medium
Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system privilege.
- Samsung Mobile Devices
- CVSS 5.1 Medium
Incorrect default permissions in WLAN security prior to SMR Jul-2026 Release 1 allows local attackers to configure TencentWifiSecurity settings.
- Samsung Mobile Devices
- CVSS 5.1 Medium
Improper access control in SmartThingsKit prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information.
- Samsung Mobile Devices
- CVSS 8.4 High
Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary code.
- Samsung Mobile Devices
- CVSS 8.4 High
Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory.
- Samsung Mobile Devices
- CVSS 8.4 High
Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR Jul-2026 Release 1 allows local privileged attackers to execute arbitrary code.
- Samsung Mobile Devices
- CVSS 8.4 High
Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory.
- Samsung Mobile Devices
- CVSS 5.8 Medium
Improper authorization in KnoxGuardManager prior to SMR Jul-2026 Release 1 allows local attackers to bypass the persistence configuration of the application.
- Samsung Mobile Devices
- CVSS 6.7 Medium
Path traversal in Wallpaper service prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system server privilege.
- Samsung Mobile Devices