Advisories · Technology

Samsung Mobile Devices.

Every CVE that names Samsung Mobile Devices among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-25832 CVE record

CVSS 4.0 Medium

Improper authentication in Samsung Mobile Devices
- Samsung Mobile Devices
- Authentication bypass
Not analysed yet 11 Apr 2022
CVE-2022-25831 CVE record

CVSS 2.0 Low

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 11 Apr 2022
CVE-2022-25822 CVE record

CVSS 4.0 Medium

Race condition in Samsung Mobile devices
- Samsung Mobile devices
- Race condition
Not analysed yet 8 Mar 2022
CVE-2022-25821 CVE record

CVSS 3.3 Low

Out-of-bounds read in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 8 Mar 2022
CVE-2022-25820 CVE record

CVSS 4.2 Medium

Unlimited authentication attempts in Samsung Mobile Devices
- Samsung Mobile Devices
- Authentication bypass
Not analysed yet 8 Mar 2022
CVE-2022-25818 CVE record

CVSS 6.5 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 8 Mar 2022
CVE-2022-25817 CVE record

CVSS 4.0 Medium

Improper authentication in Samsung Mobile Devices
- Samsung Mobile Devices
- Authentication bypass
Not analysed yet 8 Mar 2022
CVE-2022-25816 CVE record

CVSS 4.1 Medium

Improper authentication in Samsung Mobile Devices
- Samsung Mobile Devices
- Authentication bypass
Not analysed yet 8 Mar 2022
CVE-2022-25815 CVE record

CVSS 5.5 Medium

Incorrect default permissions in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 8 Mar 2022
CVE-2022-25814 CVE record

CVSS 5.5 Medium

Incorrect default permissions in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 8 Mar 2022
CVE-2022-24932 CVE record

CVSS 4.2 Medium

Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation before finishing Setup wizard.
- Samsung Mobile Devices
- Samsung Mobile Samsung Clould
- CWE-424
Not analysed yet 8 Mar 2022
CVE-2022-24931 CVE record

CVSS 7.9 High

Improper privilege management in Samsung Mobile Devices
- Samsung Mobile Devices
- Privilege escalation
Not analysed yet 8 Mar 2022
CVE-2022-24929 CVE record

CVSS 4.1 Medium

Exported Android component in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-926
Not analysed yet 8 Mar 2022
CVE-2022-24928 CVE record

CVSS 5.9 Medium

Security misconfiguration of RKP in kernel prior to SMR Mar-2022 Release 1 allows a system not to be protected by RKP.
- Samsung Mobile Devices
- CWE-815
Not analysed yet 8 Mar 2022
CVE-2022-24925 CVE record

CVSS 4.4 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 11 Feb 2022
CVE-2022-24001 CVE record

CVSS 3.8 Low

Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 11 Feb 2022
CVE-2022-24000 CVE record

CVSS 3.9 Low

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 11 Feb 2022
CVE-2022-23999 CVE record

CVSS 3.9 Low

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 11 Feb 2022
CVE-2022-23429 CVE record

CVSS 5.3 Medium

Out-of-bounds read in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 11 Feb 2022
CVE-2022-23427 CVE record

CVSS 3.9 Low

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 11 Feb 2022
CVE-2022-23426 CVE record

CVSS 4.4 Medium

Code injection in Samsung Mobile Devices
- Samsung Mobile Devices
- Code injection
Not analysed yet 11 Feb 2022
CVE-2022-23425 CVE record

CVSS 8.6 High

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 11 Feb 2022
CVE-2022-22292 CVE record

CVSS 7.1 High

Unprotected dynamic receiver in Telecom prior to SMR Feb-2022 Release 1 allows untrusted applications to launch arbitrary activity.
- Samsung Mobile Devices
- CWE-280
Not analysed yet 11 Feb 2022
CVE-2022-22291 CVE record

CVSS 5.5 Medium

Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device.
- Samsung Mobile Devices
- CWE-779
Not analysed yet 11 Feb 2022
CVE-2022-22271 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 7 Jan 2022
CVE-2022-22270 CVE record

CVSS 4.4 Medium

Code injection in Samsung Mobile Devices
- Samsung Mobile Devices
- Code injection
Not analysed yet 7 Jan 2022
CVE-2022-22269 CVE record

CVSS 4.0 Medium

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 7 Jan 2022
CVE-2022-22272 CVE record

CVSS 4.0 Medium

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 7 Jan 2022
CVE-2022-22267 CVE record

CVSS 4.0 Medium

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 7 Jan 2022
CVE-2022-22268 CVE record

CVSS 6.1 Medium

Improper authorization in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 7 Jan 2022
CVE-2022-22264 CVE record

CVSS 7.7 High

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 7 Jan 2022
CVE-2022-22266 CVE record

CVSS 4.0 Medium

Improper privilege management in Samsung Mobile Devices
- Samsung Mobile Devices
- Privilege escalation
Not analysed yet 7 Jan 2022
CVE-2022-22263 CVE record

CVSS 4.0 Medium

Improper privilege management in Samsung Mobile Devices
- Samsung Mobile Devices
- Privilege escalation
Not analysed yet 7 Jan 2022
CVE-2022-22265 CVE record

CVSS 5.0 MediumCritical · KEVKEV

An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.
- Samsung Mobile Devices
- CWE-703
Not analysed yet 7 Jan 2022
CVE-2021-25519 CVE record

CVSS 4.0 Medium

Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 8 Dec 2021
CVE-2021-25518 CVE record

CVSS 6.4 Medium

Buffer overflow in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 8 Dec 2021
CVE-2021-25517 CVE record

CVSS 7.7 High

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 8 Dec 2021
CVE-2021-25516 CVE record

CVSS 6.4 Medium

An improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attackers to track locations.
- Samsung Mobile Devices
- CWE-703
Not analysed yet 8 Dec 2021
CVE-2021-25515 CVE record

CVSS 4.0 Medium

Improper privilege management in Samsung Mobile Devices
- Samsung Mobile Devices
- Privilege escalation
Not analysed yet 8 Dec 2021
CVE-2021-25514 CVE record

CVSS 3.3 Low

An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive information.
- Samsung Mobile Devices
Not analysed yet 8 Dec 2021
CVE-2021-25513 CVE record

CVSS 2.4 Low

Improper privilege management in Samsung Mobile Devices
- Samsung Mobile Devices
- Privilege escalation
Not analysed yet 8 Dec 2021
CVE-2021-25512 CVE record

CVSS 6.1 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 8 Dec 2021
CVE-2021-25511 CVE record

CVSS 6.3 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 8 Dec 2021
CVE-2021-25510 CVE record

CVSS 5.3 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 8 Dec 2021
CVE-2021-25503 CVE record

CVSS 5.0 Medium

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 5 Nov 2021
CVE-2021-25502 CVE record

CVSS 7.9 High

Improper privilege management in Samsung Mobile Devices
- Samsung Mobile Devices
- Privilege escalation
Not analysed yet 5 Nov 2021
CVE-2021-25501 CVE record

CVSS 5.7 Medium

Improper access control in Samsung Mobile Devices
- Samsung Mobile Devices
- Broken access control
Not analysed yet 5 Nov 2021
CVE-2021-25500 CVE record

CVSS 7.2 High

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 5 Nov 2021
CVE-2021-25491 CVE record

CVSS 2.3 Low

NULL pointer dereference in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 6 Oct 2021
CVE-2021-25490 CVE record

CVSS 6.0 Medium

Improper authentication in Samsung Mobile Devices
- Samsung Mobile Devices
- Authentication bypass
Not analysed yet 6 Oct 2021
CVE-2021-25489 CVE record

CVSS 3.3 LowCritical · KEVKEV

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 6 Oct 2021
CVE-2021-25488 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 6 Oct 2021
CVE-2021-25487 CVE record

CVSS 7.3 HighCritical · KEVKEV

Out-of-bounds read in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 6 Oct 2021
CVE-2021-25486 CVE record

CVSS 2.5 Low

Information disclosure in Samsung Mobile Devices
- Samsung Mobile Devices
- Information disclosure
Not analysed yet 6 Oct 2021
CVE-2021-25485 CVE record

CVSS 7.5 High

Improper input validation in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-20
Not analysed yet 6 Oct 2021
CVE-2021-25484 CVE record

CVSS 4.0 Medium

Improper authentication in Samsung Mobile Devices
- Samsung Mobile Devices
- Authentication bypass
Not analysed yet 6 Oct 2021
CVE-2021-25483 CVE record

CVSS 4.0 Medium

Out-of-bounds read in Samsung Mobile Devices
- Samsung Mobile Devices
- Memory corruption
Not analysed yet 6 Oct 2021
CVE-2021-25482 CVE record

CVSS 5.9 Medium

SQL injection vulnerabilities in CMFA framework prior to SMR Oct-2021 Release 1 allow untrusted application to overwrite some CMFA framework information.
- Samsung Mobile Devices
- CWE-264
Not analysed yet 6 Oct 2021
CVE-2021-25481 CVE record

CVSS 6.4 Medium

Improper check for unusual conditions in Samsung Mobile Devices
- Samsung Mobile Devices
- CWE-754
Not analysed yet 6 Oct 2021
CVE-2021-25480 CVE record

CVSS 4.4 Medium

Authentication bypass by replay in Samsung Mobile Devices
- Samsung Mobile Devices
- Authentication bypass
Not analysed yet 6 Oct 2021