[ Vendor · 40 CVEs ]
Samsung Mobile
CVEs affecting Samsung Mobile published in the last 30 days, plus any Samsung Mobile CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-21133 | 12 Oct 2026 | CVSS 5.1 | Samsung Mobile Samsung FlowPath traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data. | |
| CVE-2026-21134 | 12 Oct 2026 | CVSS 6.1 | Samsung Mobile Samsung FlowImproper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information. | |
| CVE-2026-21135 | 12 Oct 2026 | CVSS 5.9 | Samsung Mobile Samsung InternetImproper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information. | |
| CVE-2026-21136 | 12 Oct 2026 | CVSS 6.8 | Samsung Mobile Smart SwitchImproper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process. | |
| CVE-2026-21137 | 12 Oct 2026 | CVSS 5.1 | Samsung Mobile Smart SwitchPath traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege. | |
| CVE-2026-21138 | 12 Oct 2026 | CVSS 6.9 | Samsung Mobile Smart SwitchInsufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications. | |
| CVE-2026-21139 | 12 Oct 2026 | CVSS 7.3 | Samsung Mobile Samsung Continuity Service for windowsImproper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected… | |
| CVE-2026-21125 | 12 Oct 2026 | CVSS 8.6 | Samsung Mobile DevicesImproper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to… | |
| CVE-2026-21126 | 12 Oct 2026 | CVSS 6.9 | Samsung Mobile DevicesImproper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write… | |
| CVE-2026-21127 | 12 Oct 2026 | CVSS 6.9 | Samsung Mobile Samsung AccountImproper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data. | |
| CVE-2026-21128 | 12 Oct 2026 | CVSS 5.1 | Samsung Mobile Samsung CheckoutImproper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary… | |
| CVE-2026-21129 | 12 Oct 2026 | CVSS 5.1 | Samsung Mobile Samsung CheckoutImproper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an… | |
| CVE-2026-21130 | 12 Oct 2026 | CVSS 5.1 | Samsung Mobile Samsung CheckoutImproper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary… | |
| CVE-2026-21131 | 12 Oct 2026 | CVSS 2.1 | Samsung Mobile Samsung FlowIncorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow… | |
| CVE-2026-21132 | 12 Oct 2026 | CVSS 6.0 | Samsung Mobile Samsung InternetImproper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is… | |
| CVE-2026-21116 | 12 Oct 2026 | CVSS 5.1 | Samsung Mobile DevicesOut-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory. | |
| CVE-2026-21117 | 12 Oct 2026 | CVSS 5.1 | Samsung Mobile DevicesImproper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information. | |
| CVE-2026-21118 | 12 Oct 2026 | CVSS 6.9 | Samsung Mobile DevicesImproper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage. | |
| CVE-2026-21119 | 12 Oct 2026 | CVSS 4.8 | Samsung Mobile DevicesOut-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds… | |
| CVE-2026-21120 | 12 Oct 2026 | CVSS 8.9 | Samsung Mobile DevicesUse after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege. | |
| CVE-2026-21121 | 12 Oct 2026 | CVSS 6.9 | Samsung Mobile DevicesImproper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs. | |
| CVE-2026-21122 | 12 Oct 2026 | CVSS 7.0 | Samsung Mobile DevicesOut-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code. | |
| CVE-2026-21123 | 12 Oct 2026 | CVSS 6.7 | Samsung Mobile DevicesImproper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of… | |
| CVE-2026-21124 | 12 Oct 2026 | CVSS 8.6 | Samsung Mobile DevicesImproper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to… | |
| CVE-2026-21114 | 12 Oct 2026 | CVSS 7.0 | Samsung Mobile DevicesOut-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code. | |
| CVE-2026-21115 | 12 Oct 2026 | CVSS 5.1 | Samsung Mobile DevicesOut-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory. | |
| CVE-2026-21140 | 2 Oct 2026 | CVSS 6.9 | Samsung Mobile DevicesImproper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications. | |
| CVE-2025-21042 | 12 Sep 2025 | CVSS 9.8 | Samsung Mobile Devices Out-of-Bounds WriteOut-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code. | Exploited |
| CVE-2025-21043 | 12 Sep 2025 | CVSS 9.8 | Samsung Mobile Devices Out-of-Bounds WriteOut-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code. | Exploited |
| CVE-2023-21492 | 4 May 2023 | CVSS 4.4 | Samsung Mobile Devices Insertion of Sensitive Information Into Log FileKernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR. | Exploited |
| CVE-2022-22265 | 10 Jan 2022 | CVSS 7.8 | Samsung Mobile Devices Use-After-FreeAn improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code… | Exploited |
| CVE-2021-25487 | 6 Oct 2021 | CVSS 7.8 | Samsung Mobile Devices Out-of-Bounds ReadLack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in… | Exploited |
| CVE-2021-25489 | 6 Oct 2021 | CVSS 5.5 | Samsung Mobile Devices Improper Input ValidationAssuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug… | Exploited |
| CVE-2021-25395 | 11 Jun 2021 | CVSS 6.4 | Samsung Mobile Devices Race ConditionA race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is… | Exploited |
| CVE-2021-25394 | 11 Jun 2021 | CVSS 6.4 | Samsung Mobile Devices Race ConditionA use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio… | Exploited |
| CVE-2021-25369 | 26 Mar 2021 | CVSS 5.5 | Samsung Mobile Devices Improper Access ControlAn improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace. | Exploited |
| CVE-2021-25370 | 26 Mar 2021 | CVSS 4.4 | Samsung Mobile Devices Memory CorruptionAn incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel… | Exploited |
| CVE-2021-25371 | 26 Mar 2021 | CVSS 6.7 | Samsung Mobile Devices UnspecifiedA vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP. | Exploited |
| CVE-2021-25372 | 26 Mar 2021 | CVSS 6.7 | Samsung Mobile Devices Improper Boundary CheckAn improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access. | Exploited |
| CVE-2021-25337 | 4 Mar 2021 | CVSS 7.1 | Samsung Mobile Devices Improper Access ControlImproper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write… | Exploited |