Samsung Mobile Samsung Mobile Devices vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Samsung Mobile Samsung Mobile Devices: 144 record(s), with affected versions and fixes.
CVE-2026-21093
Medium · 6.7
CWE-121 Sep 9, 2026
Stack-based Buffer Overflow in Samsung Android
Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVE-2026-21092
Medium · 5.3
CWE-35 Sep 9, 2026
Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to…
Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege.
CVE-2026-21091
High · 7.8
CWE-787 Sep 9, 2026
Out-of-bounds Write in Samsung Android
Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21090
High · 7.8
CWE-787 Sep 9, 2026
Out-of-bounds Write in Samsung Android
Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21089
High · 7.8
CWE-20 Sep 9, 2026
Improper Input Validation in Samsung Android
Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21088
High · 7.8
CWE-20 Sep 9, 2026
Improper Input Validation in Samsung Android
Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21087
High · 7.8
CWE-787 Sep 9, 2026
Out-of-bounds Write in Samsung Android
Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege.
CVE-2026-21086
High · 7.8
CWE-20 Sep 9, 2026
Improper Input Validation in Samsung Android
Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to access proxy configuration.
CVE-2026-21085
Medium · 6.7
CWE-787 Sep 9, 2026
Out-of-bounds Write in Samsung Android
Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVE-2026-21073
Medium · 6.1
Aug 10, 2026
Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical...
Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity.
CVE-2026-21072
High · 7.8
CWE-20 Aug 10, 2026
Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows...
Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21071
High · 7.8
CWE-20 Aug 10, 2026
Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows...
Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21070
Medium · 4.6
CWE-20 Aug 10, 2026
Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical...
Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information.
CVE-2026-21069
High · 7.8
CWE-681 Aug 10, 2026
Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026...
Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21068
High · 7.8
CWE-121 Aug 10, 2026
Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged...
Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code.
CVE-2026-21067
High · 7.8
Aug 10, 2026
Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to...
Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21066
High · 7.8
CWE-20 Aug 10, 2026
Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows...
Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21065
High · 7.8
CWE-20 Aug 10, 2026
Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local...
Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21064
Medium · 5.5
CWE-284 Aug 10, 2026
Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause...
Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability.
CVE-2026-21063
Medium · 6.1
CWE-926 Aug 10, 2026
Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1...
Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function.
CVE-2026-21062
Low · 3.3
CWE-939 Aug 10, 2026
Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local...
Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.
CVE-2026-21061
Medium · 6.5
CWE-20 Aug 10, 2026
Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote...
Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction is required for triggering this vulnerability.
CVE-2026-21060
Medium · 4.6
CWE-20 Aug 10, 2026
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical...
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles.
CVE-2026-21059
High · 7.1
CWE-926 Aug 10, 2026
Improper export of android application components in Samsung Contacts prior to SMR Aug-2026...
Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.
CVE-2026-21058
High · 7.1
CWE-20 Aug 10, 2026
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local...
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.