Samsung vulnerabilities
Published CVEs affecting Samsung products: 293 record(s), with severity, exploitation and fixes.
Android 114Exynos 1380 Firmware 49Exynos 1480 Firmware 45Exynos 1330 Firmware 43Exynos 1280 Firmware 43Exynos 1580 Firmware 42Exynos 850 Firmware 36Exynos 980 Firmware 32Exynos W930 Firmware 31Exynos W920 Firmware 31Exynos 2400 Firmware 31Exynos 1080 Firmware 29Exynos W1000 Firmware 28Exynos 2200 Firmware 26Exynos 2500 Firmware 21Escargot 18Exynos 990 Firmware 17Smart Switch 16Exynos 2100 Firmware 15Exynos 9110 Firmware 14One 9Exynos Modem 5123 Firmware 9Exynos Modem 5300 Firmware 8Exynos Modem 5400 Firmware 8Notes 7Modem 5123 Firmware 7Rlottie 6Modem 5400 Firmware 6Magicinfo 9 Server 5Galaxy Store 5Account 4Health 4Members 4Assistant 3Modem 5300 Firmware 3Internet 2Motionphoto 2Walrus 2Exynos 9820 Firmware 1Exynos 8890 firmware 1
CVE-2026-47307
High · 7.5
CWE-476 May 19, 2026
NULL Pointer Dereference in Samsung Walrus
NULL pointer dereference vulnerability in Samsung Open Source Walrus allows an attacker to cause a denial of service via a crafted WebAssembly module containing deeply nested instructions.
This issue affects Walrus: f339b8ee4ea701772e8ae640b3d1b12ac02b1ae9.
CVE-2026-21022
Medium · 5.5
May 13, 2026
Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release…
Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21021
Medium · 6.8
May 13, 2026
Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical…
Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity.
CVE-2026-21020
High · 7.8
May 13, 2026
Improper export of android application components in OmaCP prior to SMR May-2026 Release…
Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers to trigger privileged functions.
CVE-2026-21018
Medium · 6.7
CWE-787 May 13, 2026
Out-of-bounds Write in Samsung Android
Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary code.
CVE-2026-21016
Medium · 5.5
May 13, 2026
Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows…
Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21015
Medium · 5.5
CWE-276 May 13, 2026
Incorrect Default Permissions in Samsung Android
Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local attacker to access unique identifier.
CVE-2026-21023
Medium · 5.5
Apr 29, 2026
Insufficient verification of data authenticity in PackageManagerService prior to SMR…
Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the installation restriction of specific application.
CVE-2026-6840
Medium · 5.5
CWE-129 Apr 22, 2026
Missing bounds validation for operator could allow out of range operator-code lookup…
Missing bounds validation for operator could allow out of range operator-code lookup during model loading
Affected version is prior to commit 1.30.0.
CVE-2026-6839
Medium · 6.6
CWE-1284 Apr 22, 2026
Improper validation of STRING tensor offsets could allows malformed string metadata to…
Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE
Affected version is prior to commit 1.30.0.
CVE-2026-41667
Medium · 6.6
CWE-190 Apr 22, 2026
Integer Overflow or Wraparound in Samsung One
Integer overflow in constant tensor data size calculation in Samsung Open Source ONE could cause incorrect buffer sizing for large constant nodes.
Affected version is prior to commit 1.30.0.
CVE-2026-41666
Medium · 6.6
CWE-190 Apr 22, 2026
Integer Overflow or Wraparound in Samsung One
Integer overflow in tensor copy size calculation in Samsung Open Source ONE could lead to out of bounds access during loop state propagation.
Affected version is prior to commit 1.30.0.
CVE-2026-41665
Medium · 6.1
CWE-190 Apr 22, 2026
Integer Overflow or Wraparound in Samsung One
Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause incorrect memory initialization for large intermediate tensors.
Affected version is prior to commit 1.30.0.
CVE-2026-41664
Medium · 6.6
CWE-190 Apr 22, 2026
Integer Overflow or Wraparound in Samsung One
Integer overflow in memory copy size calculation in Samsung Open Source ONE could lead to invalid memory operations with large tensor shapes.
Affected version is prior to commit 1.30.0.
CVE-2026-40450
Medium · 6.6
CWE-190 Apr 22, 2026
Integer Overflow or Wraparound in Samsung One
Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy length and memory corruption for oversized tensors.
Affected version is prior to commit 1.30.0.
CVE-2026-40449
Medium · 6.6
CWE-190 Apr 22, 2026
Integer Overflow or Wraparound in Samsung One
Integer overflow in buffer size calculation could result in out of bounds memory access when handling large tensors in Samsung Open Source ONE.
Affected version is prior to commit 1.30.0.
CVE-2026-40448
Medium · 5.3
CWE-190 Apr 22, 2026
Integer Overflow or Wraparound in Samsung One
Potential Integer overflow in tensor allocation size calculation could lead to insufficient memory allocation for large tensors in Samsung Open Source ONE.
Affected version is prior to commit 1.30.0.
CVE-2026-40447
High · 7.5
CWE-190 Apr 13, 2026
Integer Overflow or Wraparound in Samsung Escargot
Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
CVE-2026-21014
Low · 2.8
Apr 13, 2026
Improper access control in Samsung Camera prior to version 16.5.00.28 allows local…
Improper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to access location data. User interaction is required for triggering this vulnerability.
CVE-2026-21013
Medium · 5.5
CWE-276 Apr 13, 2026
Incorrect Default Permissions in Samsung Galaxy Wearable
Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive information.
CVE-2026-21012
Low · 3.3
Apr 13, 2026
External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows…
External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged local attacker to create file with system privilege.
CVE-2026-21011
Medium · 6.8
CWE-732 Apr 13, 2026
Incorrect Permission Assignment for Critical Resource in Samsung Android
Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock.
CVE-2026-21010
High · 7.8
Apr 13, 2026
Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local…
Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions.
CVE-2026-21009
Medium · 6.8
CWE-754 Apr 13, 2026
Improper Check for Unusual or Exceptional Conditions in Samsung Android
Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass App Pinning.
CVE-2026-21008
Medium · 6.5
Apr 13, 2026
Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows…
Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitive information.