Samsung vulnerabilities

CVE-2026-21104 Medium · 6.7 CWE-122 Sep 9, 2026

Heap-based Buffer Overflow in Samsung Android

Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code.

CVE-2026-21103 Medium · 6.1 CWE-35 Sep 9, 2026

Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical…

Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.

CVE-2026-21102 Medium · 6.7 CWE-416 Sep 9, 2026

Use After Free in Samsung Android

Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.

CVE-2026-21101 Medium · 6.7 CWE-20 Sep 9, 2026

Improper Input Validation in Samsung Android

Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege.

CVE-2026-21100 High · 7.1 CWE-284 Sep 9, 2026

Improper Access Control in Samsung Android

Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity.

CVE-2026-21099 Medium · 5.5 CWE-280 Sep 9, 2026

Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local…

Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information.

CVE-2026-21098 Medium · 6.1 CWE-284 Sep 9, 2026

Improper Access Control in Samsung Android

Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction.

CVE-2026-21097 Medium · 6.7 CWE-285 Sep 9, 2026

Improper Authorization in Samsung Android

Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity.

CVE-2026-21096 Critical · 9.8 CWE-122 Sep 9, 2026

Heap-based Buffer Overflow in Samsung Android

Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.

CVE-2026-21095 Critical · 9.8 CWE-122 Sep 9, 2026

Heap-based Buffer Overflow in Samsung Android

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.

CVE-2026-21094 High · 8.8 CWE-20 Sep 9, 2026

Improper Input Validation in Samsung Android

Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory.

CVE-2026-21093 Medium · 6.7 CWE-121 Sep 9, 2026

Stack-based Buffer Overflow in Samsung Android

Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.

CVE-2026-21092 Medium · 5.3 CWE-35 Sep 9, 2026

Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to…

Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege.

CVE-2026-21091 High · 7.8 CWE-787 Sep 9, 2026

Out-of-bounds Write in Samsung Android

Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21090 High · 7.8 CWE-787 Sep 9, 2026

Out-of-bounds Write in Samsung Android

Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21089 High · 7.8 CWE-20 Sep 9, 2026

Improper Input Validation in Samsung Android

Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21088 High · 7.8 CWE-20 Sep 9, 2026

Improper Input Validation in Samsung Android

Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21087 High · 7.8 CWE-787 Sep 9, 2026

Out-of-bounds Write in Samsung Android

Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege.

CVE-2026-21086 High · 7.8 CWE-20 Sep 9, 2026

Improper Input Validation in Samsung Android

Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to access proxy configuration.

CVE-2026-21085 Medium · 6.7 CWE-787 Sep 9, 2026

Out-of-bounds Write in Samsung Android

Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.

CVE-2026-19588 Medium · 6.5 CWE-680 Aug 12, 2026

Integer Overflow to Buffer Overflow in Samsung Rlottie

Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.

CVE-2026-19587 Medium · 6.5 CWE-400 Aug 12, 2026

Uncontrolled Resource Consumption in Samsung Rlottie

Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation.

CVE-2026-19518 Medium · 6.5 CWE-1284 Aug 11, 2026

Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source…

Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation.

CVE-2026-19517 Medium · 6.5 CWE-770 Aug 11, 2026

Allocation of Resources Without Limits or Throttling in Samsung Rlottie

Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Excessive Allocation.

CVE-2026-21083 Medium · 6.5 CWE-20 Aug 10, 2026

Improper Input Validation in Samsung Smart Switch

Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.