CVE Intelligence

Samsung Mobile vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Samsung Mobile products: 237 record(s), with severity, exploitation and fixes.

Samsung Mobile Devices 144Smart Switch 19Samsung Notes 7Samsung Health 5Samsung Account 5Galaxy Store 4Samsung Internet 4Samsung Members 3Samsung Assistant 3Samsung Checkout 3Samsung Flow 3Galaxy Wearable 2Samsung Email 2Retail Mode 2Bixby 2Samsung Cloud Assistant 2MotionPhoto 2Libsavscmn.so 1Watch Plugin 1Visual Voicemail 1Bixby Touch 1Collection 1SmartThings 1SamsungPassAutofill 1My Galaxy 1Samsung Pass 1Samsung Tips 1InputSharing 1Libsthmbc 1Samsung Voice Recorder 1Routines 1SmartTouchCall 1Galaxy Store for Galaxy Watch 1Samsung Camera 1Samsung Plus TV 1Samsung Android USB Driver for Windows 1Samsung Auto 1Samsung Cloud 1GalaxyDiagnostics 1Samsung System Support Service 1

Exploited only (KEV) →

CVE-2025-21042 Critical · 9.8 KEV High · 66 Public exploit CWE-787 Sep 12, 2025
Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.
CVE-2023-21492 Medium · 4.4 KEV High · 51 CWE-532 May 4, 2023
Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.
CVE-2022-22265 High · 7.8 KEV High · 46 CWE-703 Jan 10, 2022
Samsung Mobile Devices Use-After-Free Vulnerability
An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.
CVE-2021-25489 Medium · 5.5 KEV High · 45 CWE-134 Oct 6, 2021
Samsung Mobile Devices Improper Input Validation Vulnerability
Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic.
CVE-2021-25487 High · 7.8 KEV High · 48 CWE-125 Oct 6, 2021
Samsung Mobile Devices Out-of-Bounds Read Vulnerability
Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer.
CVE-2021-25395 Medium · 6.4 KEV CWE-362 Jun 11, 2021
Samsung Mobile Devices Race Condition Vulnerability
A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.
CVE-2021-25394 Medium · 6.4 KEV CWE-362 Jun 11, 2021
Samsung Mobile Devices Race Condition Vulnerability
A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised.
CVE-2021-25370 Medium · 4.4 KEV High · 47 CWE-416 Mar 26, 2021
Samsung Mobile Devices Memory Corruption Vulnerability
An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic.
CVE-2021-25369 Medium · 5.5 KEV High · 48 CWE-200 Mar 26, 2021
Samsung Mobile Devices Improper Access Control Vulnerability
An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.
CVE-2021-25372 Medium · 6.7 KEV High · 46 CWE-787 Mar 26, 2021
Samsung Mobile Devices Improper Boundary Check Vulnerability
An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.
CVE-2021-25371 Medium · 6.7 KEV High · 46 CWE-912 Mar 26, 2021
Samsung Mobile Devices Unspecified Vulnerability
A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.
CVE-2021-25337 High · 7.1 KEV High · 60 Public exploit CWE-269 Mar 4, 2021
Samsung Mobile Devices Improper Access Control Vulnerability
Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files.