Samsung Mobile vulnerabilities
Published CVEs affecting Samsung Mobile products: 237 record(s), with severity, exploitation and fixes.
Samsung Mobile Devices 144Smart Switch 19Samsung Notes 7Samsung Health 5Samsung Account 5Galaxy Store 4Samsung Internet 4Samsung Members 3Samsung Assistant 3Samsung Checkout 3Samsung Flow 3Galaxy Wearable 2Samsung Email 2Retail Mode 2Bixby 2Samsung Cloud Assistant 2MotionPhoto 2Libsavscmn.so 1Watch Plugin 1Visual Voicemail 1Bixby Touch 1Collection 1SmartThings 1SamsungPassAutofill 1My Galaxy 1Samsung Pass 1Samsung Tips 1InputSharing 1Libsthmbc 1Samsung Voice Recorder 1Routines 1SmartTouchCall 1Galaxy Store for Galaxy Watch 1Samsung Camera 1Samsung Plus TV 1Samsung Android USB Driver for Windows 1Samsung Auto 1Samsung Cloud 1GalaxyDiagnostics 1Samsung System Support Service 1
CVE-2025-21067
High · 7.1
CWE-125 Oct 10, 2025
Out-of-bounds Read in Samsung Notes
Out-of-bounds read in the allocation of image buffer in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
CVE-2025-21066
High · 7.1
CWE-125 Oct 10, 2025
Out-of-bounds Read in Samsung Notes
Out-of-bounds read in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
CVE-2025-21065
Medium · 6.6
Oct 10, 2025
Improper input validation in Retail Mode prior to version 5.59.11 allows self attackers…
Improper input validation in Retail Mode prior to version 5.59.11 allows self attackers to execute privileged commands on their own devices.
CVE-2025-21064
Medium · 6.5
Oct 10, 2025
Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent…
Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data.
CVE-2025-21063
Medium · 4.6
Oct 10, 2025
Improper access control in Samsung Voice Recorder prior to version 21.5.73.12 in Android…
Improper access control in Samsung Voice Recorder prior to version 21.5.73.12 in Android 15 and 21.5.81.40 in Android 16 allows physical attackers to access recording files on the lock screen.
CVE-2025-21062
High · 7.8
CWE-327 Oct 10, 2025
Use of a Broken or Risky Cryptographic Algorithm in Samsung Smart Switch
Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability.
CVE-2025-21061
Medium · 5.5
CWE-312 Oct 10, 2025
Cleartext Storage of Sensitive Information in Samsung Smart Switch
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive data. User interaction is required for triggering this vulnerability.
CVE-2025-21060
Medium · 5.5
CWE-312 Oct 10, 2025
Cleartext Storage of Sensitive Information in Samsung Smart Switch
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability.
CVE-2025-21059
Medium · 5.5
Oct 10, 2025
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local…
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health.
CVE-2025-21058
High · 7.3
Oct 10, 2025
Improper access control in Routines prior to version 4.8.7.1 in Android 15 and 4.9.6.0…
Improper access control in Routines prior to version 4.8.7.1 in Android 15 and 4.9.6.0 in Android 16 allows local attackers to potentially execute arbitrary code with SystemUI privilege.
CVE-2025-21057
Low · 3.3
Oct 10, 2025
Use of implicit intent for sensitive communication in Samsung Notes prior to version…
Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allows local attackers to access shared notes.
CVE-2025-21055
High · 7.5
CWE-125 Oct 10, 2025
Out-of-bounds Read in Samsung Android
Out-of-bounds read and write in libimagecodec.quram.so prior to SMR Oct-2025 Release 1 allows remote attackers to access out-of-bounds memory.
CVE-2025-21054
Medium · 5.5
CWE-125 Oct 10, 2025
Out-of-bounds Read in Samsung Android
Out-of-bounds read in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to potentially access out-of-bounds memory.
CVE-2025-21053
High · 7.8
CWE-787 Oct 10, 2025
Out-of-bounds Write in Samsung Android
Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
CVE-2025-21052
High · 7.8
CWE-787 Oct 10, 2025
Out-of-bounds Write in Samsung Android
Out-of-bounds write under specific condition in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
CVE-2025-21051
High · 7.8
CWE-787 Oct 10, 2025
Out-of-bounds Write in Samsung Android
Out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2025-21050
Medium · 5.5
Oct 10, 2025
Improper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local…
Improper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local attackers to access data across multiple user profiles.
CVE-2025-21049
Medium · 5.5
Oct 10, 2025
Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local…
Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.
CVE-2025-21048
High · 7.8
CWE-22 Oct 10, 2025
Path Traversal in Samsung Android
Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to execute arbitrary code.
CVE-2025-21047
Medium · 6.8
Oct 10, 2025
Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical…
Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs.
CVE-2025-21046
Low · 2.4
Oct 10, 2025
Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1…
Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list.
CVE-2025-21045
Medium · 5.5
CWE-922 Oct 10, 2025
Insecure Storage of Sensitive Information in Samsung Wear Os
Insecure storage of sensitive information in Galaxy Watch prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information.
CVE-2025-21044
Medium · 4.4
CWE-787 Oct 10, 2025
Out-of-bounds Write in Samsung Android
Out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVE-2025-21056
Medium · 6.6
Sep 25, 2025
Improper input validation in Retail Mode prior to version 5.59.4 allows self attackers…
Improper input validation in Retail Mode prior to version 5.59.4 allows self attackers to execute privileged commands on their own devices.
CVE-2025-21043
Critical · 9.8
KEV High · 57 CWE-787 Sep 12, 2025
Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.