Advisories · Technology

Samsung Mobile Devices.

Every CVE that names Samsung Mobile Devices among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-25382 CVE record

CVSS 6.1 Medium

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 23 Apr 2021
CVE-2021-25365 CVE record

CVSS 5.9 Medium

Improper privilege management in Samsung Mobile Devices
- Samsung Mobile Devices
- Privilege escalation
Not analysed yet 9 Apr 2021
CVE-2021-25364 CVE record

CVSS 4.0 Medium

Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 9 Apr 2021
CVE-2021-25363 CVE record

CVSS 6.8 Medium

Improper privilege management in Samsung Mobile Devices
- Samsung Mobile Devices
- Privilege escalation
Not analysed yet 9 Apr 2021
CVE-2021-25362 CVE record

CVSS 6.8 Medium

Improper privilege management in Samsung Mobile Devices
- Samsung Mobile Devices
- Privilege escalation
Not analysed yet 9 Apr 2021
CVE-2021-25361 CVE record

CVSS 7.9 High

Path traversal in Samsung Mobile Devices
- Samsung Mobile Devices
- Path traversal
Not analysed yet 9 Apr 2021
CVE-2021-25360 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Heap-based buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 9 Apr 2021
CVE-2021-25359 CVE record

CVSS 4.0 Medium

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 9 Apr 2021
CVE-2021-25358 CVE record

CVSS 4.0 Medium

Plaintext password storage in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-256
Not analysed yet 9 Apr 2021
CVE-2021-25357 CVE record

CVSS 5.6 Medium

Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 9 Apr 2021
CVE-2021-25356 CVE record

CVSS 7.1 High

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 9 Apr 2021
CVE-2021-25372 CVE record

CVSS 6.1 MediumCritical · KEVKEV

An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.
- Samsung Mobile Devices
- CWE-703
Not analysed yet 26 Mar 2021
CVE-2021-25371 CVE record

CVSS 6.1 MediumCritical · KEVKEV

A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.
- Samsung Mobile Devices
- CWE-912
Not analysed yet 26 Mar 2021
CVE-2021-25370 CVE record

CVSS 6.1 MediumCritical · KEVKEV

An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic.
- Samsung Mobile Devices
- CWE-703
Not analysed yet 26 Mar 2021
CVE-2021-25369 CVE record

CVSS 6.2 MediumCritical · KEVKEV

Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 26 Mar 2021
CVE-2021-25346 CVE record

CVSS 7.1 High

A possible arbitrary memory overwrite vulnerabilities in quram library version prior to SMR Jan-2021 Release 1 allow arbitrary code execution.
- Samsung Mobile Devices
Not analysed yet 4 Mar 2021
CVE-2021-25347 CVE record

CVSS 5.3 Medium

Improper authentication in Samsung Mobile Devices
- Samsung Mobile Devices
- Authentication bypass
Not analysed yet 4 Mar 2021
CVE-2021-25345 CVE record

CVSS 4.0 Medium

Graphic format mismatch while converting video format in hwcomposer prior to SMR Mar-2021 Release 1 results in kernel panic due to unsupported format.
- Samsung Mobile Devices
Not analysed yet 4 Mar 2021
CVE-2021-25344 CVE record

CVSS 6.2 Medium

Missing permission check in knox_custom service prior to SMR Mar-2021 Release 1 allows attackers to gain access to device's serial number without permission.
- Samsung Mobile Devices
Not analysed yet 4 Mar 2021
CVE-2021-25340 CVE record

CVSS 5.1 Medium

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 4 Mar 2021
CVE-2021-25339 CVE record

CVSS 4.4 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 4 Mar 2021
CVE-2021-25338 CVE record

CVSS 4.4 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 4 Mar 2021
CVE-2021-25337 CVE record

CVSS 4.4 MediumCritical · KEVKEV

Improper privilege management in Samsung Mobile Devices
- Samsung Mobile Devices
- Privilege escalation
Not analysed yet 4 Mar 2021
CVE-2021-25336 CVE record

CVSS 2.8 Low

Improper privilege management in Samsung Mobile Devices
- Samsung Mobile Devices
- Privilege escalation
Not analysed yet 4 Mar 2021
CVE-2021-25335 CVE record

CVSS 2.5 Low

Samsung Mobile Devices: Improper lockscreen status check in cocktailbar service in Samsung mobile devices prior…
- Samsung Mobile Devices
- CWE-703
Not analysed yet 4 Mar 2021
CVE-2021-25334 CVE record

CVSS 5.5 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 4 Mar 2021
CVE-2021-25330 CVE record

Calling of non-existent provider in MobileWips application prior to SMR Feb-2021 Release 1 allows unauthorized actions including denial of service attack by hijacking the provider.
- Samsung Mobile Devices
Not analysed yet 2 Mar 2021