Samsung Android vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Samsung Android: 114 record(s), with affected versions and fixes.cpe:2.3:o:samsung:android
CVE-2025-21046
Low · 2.4
Oct 10, 2025
Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1…
Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list.
CVE-2025-21044
Medium · 4.4
CWE-787 Oct 10, 2025
Out-of-bounds Write in Samsung Android
Out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVE-2025-21043
Critical · 9.8
KEV High · 57 CWE-787 Sep 12, 2025
Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.
CVE-2025-21042
Critical · 9.8
KEV High · 66 Public exploit CWE-787 Sep 12, 2025
Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.
CVE-2023-21492
Medium · 4.4
KEV High · 51 CWE-532 May 4, 2023
Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.
CVE-2021-25489
Medium · 5.5
KEV High · 45 CWE-134 Oct 6, 2021
Samsung Mobile Devices Improper Input Validation Vulnerability
Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic.
CVE-2021-25487
High · 7.8
KEV High · 48 CWE-125 Oct 6, 2021
Samsung Mobile Devices Out-of-Bounds Read Vulnerability
Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer.
CVE-2021-25395
Medium · 6.4
KEV CWE-362 Jun 11, 2021
Samsung Mobile Devices Race Condition Vulnerability
A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.
CVE-2021-25394
Medium · 6.4
KEV CWE-362 Jun 11, 2021
Samsung Mobile Devices Race Condition Vulnerability
A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised.
CVE-2021-25370
Medium · 4.4
KEV High · 47 CWE-416 Mar 26, 2021
Samsung Mobile Devices Memory Corruption Vulnerability
An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic.
CVE-2021-25369
Medium · 5.5
KEV High · 48 CWE-200 Mar 26, 2021
Samsung Mobile Devices Improper Access Control Vulnerability
An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.
CVE-2021-25372
Medium · 6.7
KEV High · 46 CWE-787 Mar 26, 2021
Samsung Mobile Devices Improper Boundary Check Vulnerability
An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.
CVE-2021-25371
Medium · 6.7
KEV High · 46 CWE-912 Mar 26, 2021
Samsung Mobile Devices Unspecified Vulnerability
A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.
CVE-2021-25337
High · 7.1
KEV High · 60 Public exploit CWE-269 Mar 4, 2021
Samsung Mobile Devices Improper Access Control Vulnerability
Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files.