Samsung vulnerabilities
Published CVEs affecting Samsung products: 293 record(s), with severity, exploitation and fixes.
Android 114Exynos 1380 Firmware 49Exynos 1480 Firmware 45Exynos 1330 Firmware 43Exynos 1280 Firmware 43Exynos 1580 Firmware 42Exynos 850 Firmware 36Exynos 980 Firmware 32Exynos W930 Firmware 31Exynos W920 Firmware 31Exynos 2400 Firmware 31Exynos 1080 Firmware 29Exynos W1000 Firmware 28Exynos 2200 Firmware 26Exynos 2500 Firmware 21Escargot 18Exynos 990 Firmware 17Smart Switch 16Exynos 2100 Firmware 15Exynos 9110 Firmware 14One 9Exynos Modem 5123 Firmware 9Exynos Modem 5300 Firmware 8Exynos Modem 5400 Firmware 8Notes 7Modem 5123 Firmware 7Rlottie 6Modem 5400 Firmware 6Magicinfo 9 Server 5Galaxy Store 5Account 4Health 4Members 4Assistant 3Modem 5300 Firmware 3Internet 2Motionphoto 2Walrus 2Exynos 9820 Firmware 1Exynos 8890 firmware 1
CVE-2026-21082
Medium · 5.5
CWE-23 Aug 10, 2026
Relative Path Traversal in Samsung Health
Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
CVE-2026-21080
Medium · 6.5
CWE-312 Aug 10, 2026
Cleartext Storage of Sensitive Information in Samsung Smart Switch
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.
CVE-2026-21079
Medium · 6.5
CWE-311 Aug 10, 2026
Missing Encryption of Sensitive Data in Samsung Smart Switch
Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.
CVE-2026-21078
Medium · 6.5
CWE-345 Aug 10, 2026
Insufficient Verification of Data Authenticity in Samsung Smart Switch
Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity.
CVE-2026-21077
Medium · 5.5
CWE-863 Aug 10, 2026
Incorrect Authorization in Samsung Health
Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
CVE-2026-21076
Medium · 5.5
CWE-863 Aug 10, 2026
Incorrect Authorization in Samsung Health
Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
CVE-2026-21073
Medium · 6.1
Aug 10, 2026
Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows…
Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity.
CVE-2026-21072
High · 7.8
CWE-20 Aug 10, 2026
Improper Input Validation in Samsung Android
Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21071
High · 7.8
CWE-20 Aug 10, 2026
Improper Input Validation in Samsung Android
Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21070
Medium · 4.6
CWE-20 Aug 10, 2026
Improper Input Validation in Samsung Android
Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information.
CVE-2026-21069
High · 7.8
CWE-681 Aug 10, 2026
Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR…
Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21068
High · 7.8
CWE-121 Aug 10, 2026
Stack-based Buffer Overflow in Samsung Android
Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code.
CVE-2026-21067
High · 7.8
Aug 10, 2026
Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local…
Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21066
High · 7.8
CWE-20 Aug 10, 2026
Improper Input Validation in Samsung Android
Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21065
High · 7.8
CWE-20 Aug 10, 2026
Improper Input Validation in Samsung Android
Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21064
Medium · 5.5
CWE-284 Aug 10, 2026
Improper Access Control in Samsung Android
Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability.
CVE-2026-21063
Medium · 6.1
CWE-926 Aug 10, 2026
Improper export of android application components in AppLock prior to SMR Aug-2026…
Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function.
CVE-2026-21062
Low · 3.3
CWE-939 Aug 10, 2026
Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local…
Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.
CVE-2026-21061
Medium · 6.5
CWE-20 Aug 10, 2026
Improper Input Validation in Samsung Android
Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction is required for triggering this vulnerability.
CVE-2026-21060
Medium · 4.6
CWE-20 Aug 10, 2026
Improper Input Validation in Samsung Android
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles.
CVE-2026-21059
High · 7.1
CWE-926 Aug 10, 2026
Improper export of android application components in Samsung Contacts prior to SMR…
Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.
CVE-2026-21058
High · 7.1
CWE-20 Aug 10, 2026
Improper Input Validation in Samsung Android
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.
CVE-2026-18772
Medium · 6.5
CWE-1325 Aug 4, 2026
Improperly controlled sequential memory allocation vulnerability in Samsung Open Source…
Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion.
CVE-2026-15551
Medium · 5.5
CWE-190 Jul 12, 2026
Samsung rlottie: Numeric truncation in gray_hline() leads to heap-based buffer overflow when rendering a crafted Lottie animation at native canvas size
Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Overflow Buffers.
This issue affects .
CVE-2026-21038
Medium · 5.5
CWE-125 Jun 5, 2026
Out-of-bounds Read in Samsung Android Usb Driver
Improper input validation in Samsung Android USB Driver for Windows prior to version 1.9.5.0 allows local attacker to access out-of-bounds memory.