[ Vendor · 16 CVEs ]
Samsung
CVEs affecting Samsung published in the last 30 days, plus any Samsung CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2025-21042 | 12 Sep 2025 | CVSS 9.8 | Samsung Mobile Devices Out-of-Bounds WriteOut-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code. | Exploited |
| CVE-2025-21043 | 12 Sep 2025 | CVSS 9.8 | Samsung Mobile Devices Out-of-Bounds WriteOut-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code. | Exploited |
| CVE-2025-4632 | 13 May 2025 | CVSS 9.8 | Samsung MagicINFO 9 Server Path TraversalImproper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to… | ExploitedFix |
| CVE-2024-7399 | 12 Aug 2024 | CVSS 9.8 | Samsung MagicINFO 9 Server Path TraversalImproper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to… | Exploited |
| CVE-2023-21492 | 4 May 2023 | CVSS 4.4 | Samsung Mobile Devices Insertion of Sensitive Information Into Log FileKernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR. | Exploited |
| CVE-2022-22265 | 10 Jan 2022 | CVSS 7.8 | Samsung Mobile Devices Use-After-FreeAn improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code… | Exploited |
| CVE-2021-25487 | 6 Oct 2021 | CVSS 7.8 | Samsung Mobile Devices Out-of-Bounds ReadLack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in… | Exploited |
| CVE-2021-25489 | 6 Oct 2021 | CVSS 5.5 | Samsung Mobile Devices Improper Input ValidationAssuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug… | Exploited |
| CVE-2021-25395 | 11 Jun 2021 | CVSS 6.4 | Samsung Mobile Devices Race ConditionA race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is… | Exploited |
| CVE-2021-25394 | 11 Jun 2021 | CVSS 6.4 | Samsung Mobile Devices Race ConditionA use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio… | Exploited |
| CVE-2021-25369 | 26 Mar 2021 | CVSS 5.5 | Samsung Mobile Devices Improper Access ControlAn improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace. | Exploited |
| CVE-2021-25370 | 26 Mar 2021 | CVSS 4.4 | Samsung Mobile Devices Memory CorruptionAn incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel… | Exploited |
| CVE-2021-25371 | 26 Mar 2021 | CVSS 6.7 | Samsung Mobile Devices UnspecifiedA vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP. | Exploited |
| CVE-2021-25372 | 26 Mar 2021 | CVSS 6.7 | Samsung Mobile Devices Improper Boundary CheckAn improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access. | Exploited |
| CVE-2021-25337 | 4 Mar 2021 | CVSS 7.1 | Samsung Mobile Devices Improper Access ControlImproper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write… | Exploited |
| CVE-2016-1010 | 12 Mar 2016 | CVSS 8.8 | Adobe Flash Player and AIR Integer OverflowInteger overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on… | ExploitedFix |