cve.bz

samsung android vulnerabilities, newest first, page 3

Filter
  1. 2.4CVE-2025-21046EPSS 0.2%

    Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list.

  2. 4.4CVE-2025-21044EPSS 0.1%

    Out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.

  3. 9.8CVE-2025-21043KEVEPSS 2.2%

    Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.

  4. 9.8CVE-2025-21042KEVEPSS 36%

    Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.

  5. 5.5CVE-2025-21041EPSS 0.1%

    Insecure Storage of Sensitive Information in Secure Folder prior to Android 16 allows local attackers to access sensitive information.

  6. 7.8CVE-2025-21034EPSS 0.1%

    Out-of-bounds write in libsavsvc.so prior to SMR Sep-2025 Release 1 allows local attackers to potentially execute arbitrary code.

  7. 5.5CVE-2025-21033EPSS 0.1%

    Improper access control in ContactProvider prior to SMR Sep-2025 Release 1 allows local attackers to access sensitive information.

  8. 6.8CVE-2025-21032EPSS 0.2%

    Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions.

  9. 6.8CVE-2025-21031EPSS 0.1%

    Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs.

  10. 3.3CVE-2025-21029EPSS 0.1%

    Improper handling of insufficient permission in System UI prior to SMR Sep-2025 Release 1 allows local attackers to send arbitrary replies to messages from the cover display.

  11. 5.5CVE-2025-21028EPSS 0.1%

    Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items.

  12. 4.4CVE-2025-21027EPSS 0.1%

    Improper verification of intent by broadcast receiver in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to temporarily disable the SIM.

  13. 3.3CVE-2025-21026EPSS 0.1%

    Improper handling of insufficient permission in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to interrupt the call.

  14. 4.4CVE-2025-21025EPSS 0.1%

    Improper access control in MARsExemptionManager prior to SMR Sep-2025 Release 1 allows local attackers to be excluded from background execution management.

  15. 7.8CVE-2023-21480EPSS 0.1%

    Improper input validation vulnerability in CertByte prior to SMR Apr-2023 Release 1 allows local attackers to launch privileged activities.

  16. 5.3CVE-2023-21479EPSS 0.4%

    Improper authorization in Smart suggestions prior to SMR Apr-2023 Release 1 in Android 13 and 4.1.01.0 in Android 12 allows remote attackers to register a schedule.

  17. 5.5CVE-2023-21478EPSS 0.1%

    Improper input validation vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data.

  18. 5.5CVE-2023-21477EPSS 0.1%

    Access of Memory Location After End of Buffer vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data.

  19. 7.8CVE-2023-21476EPSS 0.2%

    Out-of-bounds Write vulnerability in libaudiosaplus_sec.so library prior to SMR Apr-2023 Release 1 allows local attacker to execute arbitrary code.

  20. 7.8CVE-2023-21475EPSS 0.2%

    Out-of-bounds Write vulnerability in libaudiosaplus_sec.so library prior to SMR Apr-2023 Release 1 allows local attacker to execute arbitrary code.

  21. 7.1CVE-2023-21474EPSS 0.1%

    Intent redirection vulnerability in SecSettings prior to SMR Apr-2022 Release 1 allows attackers to access arbitrary file with system privilege.

  22. 6.8CVE-2023-21473EPSS 0.2%

    Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader.

  23. 6.8CVE-2023-21472EPSS 0.2%

    Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader.

  24. 3.3CVE-2023-21471EPSS 0.1%

    Improper access control vulnerability in SemClipboard prior to SMR Apr-2023 Release 1 allows attackers to read arbitrary files with system permission.

  25. 3.3CVE-2023-21470EPSS 0.1%

    Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location information using com.samsung.android.wifi.NETWORK_LOCATION action.

  26. 3.3CVE-2023-21469EPSS 0.1%

    Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location information using com.samsung.android.wifi.GEOFENCE action.

  27. 7.8CVE-2023-21468EPSS 0.1%

    Improper access control vulnerability in Telephony prior to SMR Apr-2023 Release 1 allows attackers to access files with escalated permission.

  28. 3.3CVE-2023-21466EPSS 0.08%

    PendingIntent hijacking vulnerability in CertificatePolicy in framework prior to SMR Apr-2023 Release 1 allows local attackers to access contentProvider without proper permission.

  29. 7.1CVE-2025-21015EPSS 0.2%

    Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to delete file with Document scanner's privilege.

  30. 5.5CVE-2025-21014EPSS 0.1%

    Improper export of android application component in Emergency SoS prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information.

  31. 6.0CVE-2025-21010EPSS 0.1%

    Improper privilege management in SamsungAccount prior to SMR Aug-2025 Release 1 allows local privileged attackers to deactivate Samsung account.

  32. 3.3CVE-2025-20990EPSS 0.1%

    Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to access device identifier.

  33. 5.5CVE-2025-21009EPSS 0.1%

    Out-of-bounds read in decoding malformed frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.

  34. 5.5CVE-2025-21008EPSS 0.1%

    Out-of-bounds read in decoding frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.

  35. 5.5CVE-2025-21007EPSS 0.1%

    Out-of-bounds write in accessing uninitialized memory in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.

  36. 7.8CVE-2025-21006EPSS 0.1%

    Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 allows local attackers to write out-of-bounds memory.

  37. 5.5CVE-2025-21005EPSS 0.1%

    Improper access control in isemtelephony prior to Android 15 allows local attackers to access sensitive information.

  38. 5.5CVE-2025-21003EPSS 0.1%

    Insecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows local attackers to access sensitive information.

  39. 5.5CVE-2025-21002EPSS 0.1%

    Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to manipulate broadcasting Auracast.

  40. 5.5CVE-2025-21001EPSS 0.1%

    Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to stop broadcasting Auracast.

  41. 3.3CVE-2025-21000EPSS 0.1%

    Improper privilege management in Bluetooth prior to SMR Jul-2025 Release 1 allows local attackers to enable Bluetooth.

  42. 2.1CVE-2025-20999EPSS 0.2%

    Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025 Release 1 allows secondary users to access owner's saved Wi-Fi password.

  43. 6.7CVE-2025-20983EPSS 0.1%

    Out-of-bounds write in checking auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.

  44. 6.7CVE-2025-20982EPSS 0.1%

    Out-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.

  45. 6.8CVE-2025-20993EPSS 0.1%

    Out-of-bounds write in libsecimaging.camera.samsung.so prior to SMR Jun-2025 Release 1 allows local attackers to write out-of-bounds memory.

  46. 7.7CVE-2025-20992EPSS 0.2%

    Out-of-bound read in libsecimaging.camera.samsung.so prior to SMR Feb-2025 Release 1 allows local attackers to read out-of-bounds memory.

  47. 5.1CVE-2025-20991EPSS 0.1%

    Improper export of Android application components in Bluetooth prior to SMR Jun-2025 Release 1 allows local attackers to make devices discoverable.

  48. 5.2CVE-2025-20989EPSS 0.1%

    Improper logging in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a hmac_key.

  49. 7.1CVE-2025-20988EPSS 0.2%

    Out-of-bounds read in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to read out-of-bounds memory.

  50. 6.7CVE-2025-20987EPSS 0.2%

    Improper access control in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a auth_token.