Samsung vulnerabilities
Published CVEs affecting Samsung products: 248 record(s), with severity, exploitation and fixes.
Android 93Exynos 1380 Firmware 49Exynos 1480 Firmware 45Exynos 1580 Firmware 40Exynos 1280 Firmware 38Exynos 1330 Firmware 36Exynos 850 Firmware 32Exynos 980 Firmware 32Exynos W920 Firmware 31Exynos W930 Firmware 31Exynos 2400 Firmware 31Exynos W1000 Firmware 28Exynos 1080 Firmware 28Exynos 2200 Firmware 26Exynos 2500 Firmware 21Escargot 18Exynos 990 Firmware 17Smart Switch 16Exynos 2100 Firmware 15Exynos 9110 Firmware 14One 9Exynos Modem 5123 Firmware 9Exynos Modem 5300 Firmware 8Exynos Modem 5400 Firmware 8Modem 5123 Firmware 7Rlottie 6Modem 5400 Firmware 6Notes 6Magicinfo 9 Server 5Galaxy Store 5Account 4Members 4Health 4Modem 5300 Firmware 3Assistant 3Motionphoto 2Walrus 2Internet 2Smart Touch Call 1Email 1
CVE-2026-19588
Medium · 6.5
CWE-680 Aug 12, 2026
Integer Overflow to Buffer Overflow in Samsung Rlottie
Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.
CVE-2026-19587
Medium · 6.5
CWE-400 Aug 12, 2026
Uncontrolled Resource Consumption in Samsung Rlottie
Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation.
CVE-2026-19518
Medium · 6.5
CWE-1284 Aug 11, 2026
Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source…
Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation.
CVE-2026-19517
Medium · 6.5
CWE-770 Aug 11, 2026
Allocation of Resources Without Limits or Throttling in Samsung Rlottie
Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Excessive Allocation.
CVE-2026-21083
Medium · 6.5
CWE-20 Aug 10, 2026
Improper Input Validation in Samsung Smart Switch
Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.
CVE-2026-21082
Medium · 5.5
CWE-23 Aug 10, 2026
Relative Path Traversal in Samsung Health
Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
CVE-2026-21080
Medium · 6.5
CWE-312 Aug 10, 2026
Cleartext Storage of Sensitive Information in Samsung Smart Switch
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.
CVE-2026-21079
Medium · 6.5
CWE-311 Aug 10, 2026
Missing Encryption of Sensitive Data in Samsung Smart Switch
Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.
CVE-2026-21078
Medium · 6.5
CWE-345 Aug 10, 2026
Insufficient Verification of Data Authenticity in Samsung Smart Switch
Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity.
CVE-2026-21077
Medium · 5.5
CWE-863 Aug 10, 2026
Incorrect Authorization in Samsung Health
Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
CVE-2026-21076
Medium · 5.5
CWE-863 Aug 10, 2026
Incorrect Authorization in Samsung Health
Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
CVE-2026-21073
Medium · 6.1
Aug 10, 2026
Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows…
Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity.
CVE-2026-21072
High · 7.8
CWE-20 Aug 10, 2026
Improper Input Validation in Samsung Android
Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21071
High · 7.8
CWE-20 Aug 10, 2026
Improper Input Validation in Samsung Android
Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21070
Medium · 4.6
CWE-20 Aug 10, 2026
Improper Input Validation in Samsung Android
Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information.
CVE-2026-21069
High · 7.8
CWE-681 Aug 10, 2026
Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR…
Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21068
High · 7.8
CWE-121 Aug 10, 2026
Stack-based Buffer Overflow in Samsung Android
Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code.
CVE-2026-21067
High · 7.8
Aug 10, 2026
Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local…
Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21066
High · 7.8
CWE-20 Aug 10, 2026
Improper Input Validation in Samsung Android
Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21065
High · 7.8
CWE-20 Aug 10, 2026
Improper Input Validation in Samsung Android
Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21064
Medium · 5.5
CWE-284 Aug 10, 2026
Improper Access Control in Samsung Android
Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability.
CVE-2026-21063
Medium · 6.1
CWE-926 Aug 10, 2026
Improper export of android application components in AppLock prior to SMR Aug-2026…
Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function.
CVE-2026-21062
Low · 3.3
CWE-939 Aug 10, 2026
Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local…
Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.
CVE-2026-21061
Medium · 6.5
CWE-20 Aug 10, 2026
Improper Input Validation in Samsung Android
Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction is required for triggering this vulnerability.
CVE-2026-21060
Medium · 4.6
CWE-20 Aug 10, 2026
Improper Input Validation in Samsung Android
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles.