Samsung vulnerabilities
Published CVEs affecting Samsung products: 293 record(s), with severity, exploitation and fixes.
Android 114Exynos 1380 Firmware 49Exynos 1480 Firmware 45Exynos 1330 Firmware 43Exynos 1280 Firmware 43Exynos 1580 Firmware 42Exynos 850 Firmware 36Exynos 980 Firmware 32Exynos W930 Firmware 31Exynos W920 Firmware 31Exynos 2400 Firmware 31Exynos 1080 Firmware 29Exynos W1000 Firmware 28Exynos 2200 Firmware 26Exynos 2500 Firmware 21Escargot 18Exynos 990 Firmware 17Smart Switch 16Exynos 2100 Firmware 15Exynos 9110 Firmware 14One 9Exynos Modem 5123 Firmware 9Exynos Modem 5300 Firmware 8Exynos Modem 5400 Firmware 8Notes 7Modem 5123 Firmware 7Rlottie 6Modem 5400 Firmware 6Magicinfo 9 Server 5Galaxy Store 5Account 4Health 4Members 4Assistant 3Modem 5300 Firmware 3Internet 2Motionphoto 2Walrus 2Exynos 9820 Firmware 1Exynos 8890 firmware 1
CVE-2025-21079
High · 8.1
Nov 5, 2025
Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to...
Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability.
CVE-2025-21078
Medium · 6.5
Nov 5, 2025
Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows...
Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications.
CVE-2025-21077
Low · 3.3
Nov 5, 2025
Improper input validation in Samsung Email prior to version 6.2.06.0 allows local attackers to...
Improper input validation in Samsung Email prior to version 6.2.06.0 allows local attackers to launch arbitrary activity with Samsung Email privilege.
CVE-2025-21076
Medium · 5.5
Nov 5, 2025
Improper handling of insufficient permissions or privileges in Samsung Account prior to version...
Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows local attackers to access data in Samsung Account. User interaction is required for triggering this vulnerability.
CVE-2025-21075
High · 7.5
CWE-787 Nov 5, 2025
Out-of-bounds write in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote...
Out-of-bounds write in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory.
CVE-2025-21074
High · 7.5
CWE-125 Nov 5, 2025
Out-of-bounds read in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote...
Out-of-bounds read in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory.
CVE-2025-21073
Medium · 4.1
Nov 5, 2025
Insecure default configuration in USB connection mode prior to SMR Nov-2025 Release 1 allows...
Insecure default configuration in USB connection mode prior to SMR Nov-2025 Release 1 allows privileged physical attackers to access user data. User interaction is required for triggering this vulnerability.
CVE-2025-21071
Medium · 4.4
CWE-787 Nov 5, 2025
Out-of-bounds write in handling opcode in fingerprint trustlet prior to SMR Nov-2025 Release 1...
Out-of-bounds write in handling opcode in fingerprint trustlet prior to SMR Nov-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVE-2025-54335
Medium · 6.5
CWE-416 Nov 4, 2025
Use After Free in Samsung Exynos 1480 Firmware
An issue was discovered in the GPU driver in Samsung Mobile Processor Exynos 1480, 2400, 1580, 2500. There is a use-after-free in the Xclipse GPU Driver.
CVE-2025-52910
Critical · 9.8
CWE-416 Nov 4, 2025
Use After Free in Samsung Exynos 1280 Firmware
An issue was discovered in the GPU in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1330, 1380, 1480, 2400. A Use-After-Free leads to privilege escalation.
CVE-2025-27374
Medium · 5.3
CWE-787 Nov 4, 2025
Out-of-bounds Write in Samsung Exynos 9825 Firmware
An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850, 1080, 1280, 2200, 1330, 1380, 1480, 2400. The lack of a length check leads to out-of-bounds writes.
CVE-2024-56426
High · 7.5
CWE-787 Nov 4, 2025
Out-of-bounds Write in Samsung Exynos 1080 Firmware
An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000. The lack of a length check leads to out-of-bounds writes via malformed USB packets to the target.
CVE-2025-54327
Medium · 6.5
CWE-20 Nov 4, 2025
Improper Input Validation in Samsung Exynos 1280 Firmware
An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1380, W920, W930, W1000. Improper input validation in the VTS driver leads to an arbitrary write.
CVE-2025-49494
High · 7.5
CWE-400 Nov 4, 2025
Uncontrolled Resource Consumption in Samsung Modem 5123 Firmware
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 2100, 1280, 2200, 1330, 1380, 1480, 9110, Modem 5123. Mishandling of an 5G NRMM packet leads to a Denial of Service.
CVE-2025-54334
High · 7.5
CWE-476 Nov 4, 2025
NULL Pointer Dereference in Samsung Exynos 1280 Firmware
An issue was discovered in the NPU driver in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500. There is a NULL Pointer Dereference of hdev in the __npu_vertex_bootup function.
CVE-2025-52513
High · 7.5
CWE-787 Nov 4, 2025
Out-of-bounds Write in Samsung Exynos 1580 Firmware
An issue was discovered in Samsung Mobile Processor Exynos 2400, 1580, 2500. A race condition in the HTS driver results in an out-of-bounds write, leading to a denial of service.
CVE-2025-52512
High · 7.5
CWE-125 Nov 4, 2025
Out-of-bounds Read in Samsung Exynos 1580 Firmware
An issue was discovered in Samsung Mobile Processor Exynos 2400, 1580, 2500. A race condition in the HTS driver results in out-of-bounds memory access, leading to a denial of service.
CVE-2025-54333
Medium · 5.3
CWE-763 Nov 4, 2025
An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July…
An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Invalid Pointer Dereference of node in the get_vs4l_profiler_node function.
CVE-2025-54325
Medium · 5.3
CWE-125 Nov 4, 2025
Out-of-bounds Read in Samsung Exynos 1080 Firmware
An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1080, 1280, 2200, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000. A race condition in the VTS driver results in an out-of-bounds read, leading to an information leak.
CVE-2025-54332
High · 7.5
CWE-476 Nov 4, 2025
NULL Pointer Dereference in Samsung Exynos 1380 Firmware
An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is a NULL Pointer Dereference of profiler.node in the npu_vertex_profileoff function.
CVE-2025-54331
Medium · 5.3
CWE-822 Nov 4, 2025
Untrusted Pointer Dereference in Samsung Exynos 1380 Firmware
An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Untrusted Pointer Dereference of src_hdr in the copy_ncp_header function.
CVE-2025-54330
Medium · 5.3
CWE-125 Nov 4, 2025
Out-of-bounds Read in Samsung Exynos 1380 Firmware
An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Out-of-bounds Read of q->bufs[] in the __is_done_for_me function.
CVE-2025-54329
High · 7.5
CWE-122 Nov 4, 2025
Heap-based Buffer Overflow in Samsung Exynos 1280 Firmware
An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. The function used to send a multiple-payloads message (including an SMS message) lacks bounds checking, which can lead to a heap overflow.
CVE-2025-54323
High · 7.5
CWE-200 Nov 4, 2025
Exposure of Sensitive Information in Samsung Exynos 1080 Firmware
An issue was discovered in the camera in Samsung Mobile Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, and 1580. Improper debug printing leads to information leakage.
CVE-2025-48025
Medium · 4.3
CWE-284 Oct 20, 2025
Improper Access Control in Samsung Exynos 980 Firmware
In Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000, there is an improper access control vulnerability related to a log file.