Vulnerabilidades do Samsung Android
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Samsung Android: 93 registro(s), com versões afetadas e correções.cpe:2.3:o:samsung:android
CVE-2026-21073
Média · 6.1
10/08/2026
Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows…
Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity.
CVE-2026-21072
Alta · 7.8
CWE-20 10/08/2026
Improper Input Validation em Samsung Android
Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21071
Alta · 7.8
CWE-20 10/08/2026
Improper Input Validation em Samsung Android
Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21070
Média · 4.6
CWE-20 10/08/2026
Improper Input Validation em Samsung Android
Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information.
CVE-2026-21069
Alta · 7.8
CWE-681 10/08/2026
Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR…
Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21068
Alta · 7.8
CWE-121 10/08/2026
Stack-based Buffer Overflow em Samsung Android
Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code.
CVE-2026-21067
Alta · 7.8
10/08/2026
Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local…
Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21066
Alta · 7.8
CWE-20 10/08/2026
Improper Input Validation em Samsung Android
Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21065
Alta · 7.8
CWE-20 10/08/2026
Improper Input Validation em Samsung Android
Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21064
Média · 5.5
CWE-284 10/08/2026
Improper Access Control em Samsung Android
Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability.
CVE-2026-21063
Média · 6.1
CWE-926 10/08/2026
Improper export of android application components in AppLock prior to SMR Aug-2026…
Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function.
CVE-2026-21062
Baixa · 3.3
CWE-939 10/08/2026
Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local…
Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.
CVE-2026-21061
Média · 6.5
CWE-20 10/08/2026
Improper Input Validation em Samsung Android
Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction is required for triggering this vulnerability.
CVE-2026-21060
Média · 4.6
CWE-20 10/08/2026
Improper Input Validation em Samsung Android
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles.
CVE-2026-21059
Alta · 7.1
CWE-926 10/08/2026
Improper export of android application components in Samsung Contacts prior to SMR…
Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.
CVE-2026-21058
Alta · 7.1
CWE-20 10/08/2026
Improper Input Validation em Samsung Android
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.
CVE-2026-21031
Alta · 7.8
CWE-863 05/06/2026
Incorrect Authorization em Samsung Android
Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. User interaction is required for triggering this vulnerability.
CVE-2026-21030
Alta · 7.8
05/06/2026
Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows…
Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger privileged functions.
CVE-2026-21029
Alta · 7.8
05/06/2026
Improper export of android application components in Galaxy Editing Service prior to SMR…
Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 allows local attacker to execute privileged operations.
CVE-2026-21028
Média · 5.5
05/06/2026
Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local…
Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21027
Baixa · 3.3
05/06/2026
Improper export of android application components in ImsSettings prior to SMR Jun-2026…
Improper export of android application components in ImsSettings prior to SMR Jun-2026 Release 1 allows local attackers to trigger logging function.
CVE-2026-21026
Média · 5.5
05/06/2026
Improper export of android application components in SpriteWallpaper prior to SMR…
Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attackers to access to sensitive information.
CVE-2026-21025
Média · 5.5
05/06/2026
Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local…
Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21017
Média · 5.5
05/06/2026
Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR…
Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attackers to access privileged files.
CVE-2026-21022
Média · 5.5
13/05/2026
Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release…
Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.