Samsung Mobile vulnerabilities
Published CVEs affecting Samsung Mobile products: 237 record(s), with severity, exploitation and fixes.
Samsung Mobile Devices 144Smart Switch 19Samsung Notes 7Samsung Health 5Samsung Account 5Galaxy Store 4Samsung Internet 4Samsung Members 3Samsung Assistant 3Samsung Checkout 3Samsung Flow 3Galaxy Wearable 2Samsung Email 2Retail Mode 2Bixby 2Samsung Cloud Assistant 2MotionPhoto 2Libsavscmn.so 1Watch Plugin 1Visual Voicemail 1Bixby Touch 1Collection 1SmartThings 1SamsungPassAutofill 1My Galaxy 1Samsung Pass 1Samsung Tips 1InputSharing 1Libsthmbc 1Samsung Voice Recorder 1Routines 1SmartTouchCall 1Galaxy Store for Galaxy Watch 1Samsung Camera 1Samsung Plus TV 1Samsung Android USB Driver for Windows 1Samsung Auto 1Samsung Cloud 1GalaxyDiagnostics 1Samsung System Support Service 1
CVE-2026-21065
High · 7.8
CWE-20 Aug 10, 2026
Improper Input Validation in Samsung Android
Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21064
Medium · 5.5
CWE-284 Aug 10, 2026
Improper Access Control in Samsung Android
Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability.
CVE-2026-21063
Medium · 6.1
CWE-926 Aug 10, 2026
Improper export of android application components in AppLock prior to SMR Aug-2026…
Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function.
CVE-2026-21062
Low · 3.3
CWE-939 Aug 10, 2026
Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local…
Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.
CVE-2026-21061
Medium · 6.5
CWE-20 Aug 10, 2026
Improper Input Validation in Samsung Android
Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction is required for triggering this vulnerability.
CVE-2026-21060
Medium · 4.6
CWE-20 Aug 10, 2026
Improper Input Validation in Samsung Android
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles.
CVE-2026-21059
High · 7.1
CWE-926 Aug 10, 2026
Improper export of android application components in Samsung Contacts prior to SMR…
Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.
CVE-2026-21058
High · 7.1
CWE-20 Aug 10, 2026
Improper Input Validation in Samsung Android
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.
CVE-2026-21047
High · 8.3
CWE-787 Jul 28, 2026
Out-of-bounds Write in Samsung Mobile Samsung Mobile Devices
Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to potentially execute arbitrary code.
CVE-2026-21057
Medium · 6.8
Jul 10, 2026
Improper input validation in Samsung Pass prior to version 5.2.10.3 allows local…
Improper input validation in Samsung Pass prior to version 5.2.10.3 allows local privileged attackers to write out-of-bounds memory.
CVE-2026-21056
Medium · 4.8
Jul 10, 2026
Improper authorization in Samsung Health prior to version 7.00.0.107 allows local…
Improper authorization in Samsung Health prior to version 7.00.0.107 allows local attackers to access connected device information.
CVE-2026-21055
High · 8.5
Jul 10, 2026
Improper export of android application components in Bixby prior to version 4.0.70.8…
Improper export of android application components in Bixby prior to version 4.0.70.8 allows local attackers to execute arbitrary commands with Bixby privilege.
CVE-2026-21054
Medium · 6.9
Jul 10, 2026
Improper export of android application components in InputSharing prior to version…
Improper export of android application components in InputSharing prior to version 2.7.01.4 allows local attackers to access sharing data.
CVE-2026-21053
Medium · 5.1
Jul 10, 2026
Improper input validation in Samsung Email prior to version 6.2.13.1 allows local…
Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the application sandbox.
CVE-2026-21052
Medium · 6.8
Jul 10, 2026
Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local…
Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system privilege.
CVE-2026-21051
Medium · 5.1
Jul 10, 2026
Incorrect default permissions in WLAN security prior to SMR Jul-2026 Release 1 allows…
Incorrect default permissions in WLAN security prior to SMR Jul-2026 Release 1 allows local attackers to configure TencentWifiSecurity settings.
CVE-2026-21050
Medium · 5.1
Jul 10, 2026
Improper access control in SmartThingsKit prior to SMR Jul-2026 Release 1 allows local…
Improper access control in SmartThingsKit prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21049
High · 8.4
Jul 10, 2026
Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local…
Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary code.
CVE-2026-21048
High · 8.3
Jul 10, 2026
Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR…
Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory.
CVE-2026-21046
High · 8.4
Jul 10, 2026
Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR…
Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR Jul-2026 Release 1 allows local privileged attackers to execute arbitrary code.
CVE-2026-21045
High · 8.3
Jul 10, 2026
Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR…
Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory.
CVE-2026-21044
Medium · 5.8
Jul 10, 2026
Improper authorization in KnoxGuardManager prior to SMR Jul-2026 Release 1 allows local…
Improper authorization in KnoxGuardManager prior to SMR Jul-2026 Release 1 allows local attackers to bypass the persistence configuration of the application.
CVE-2026-21043
Medium · 6.7
Jul 10, 2026
Path traversal in Wallpaper service prior to SMR Jul-2026 Release 1 allows local…
Path traversal in Wallpaper service prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system server privilege.
CVE-2026-21042
High · 8.7
Jul 10, 2026
Out-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows remote…
Out-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows remote attackers to execute arbitrary code.
CVE-2026-21041
Medium · 6.9
Jul 10, 2026
Improper access control in SamsungSEAgentService prior to SMR Jul-2026 Release 1 allows…
Improper access control in SamsungSEAgentService prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information.