Vulnerabilidades do Samsung Android

CVE-2025-21046 Baixa · 2.4 10/10/2025

Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1…

Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list.

CVE-2025-21044 Média · 4.4 CWE-787 10/10/2025

Out-of-bounds Write em Samsung Android

Out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.

CVE-2025-21043 Crítica · 9.8 KEV Alta · 57 CWE-787 12/09/2025

Samsung Mobile Devices Out-of-Bounds Write Vulnerability

Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.

CVE-2025-21042 Crítica · 9.8 KEV Alta · 66 Exploit público CWE-787 12/09/2025

Samsung Mobile Devices Out-of-Bounds Write Vulnerability

Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.

CVE-2023-21492 Média · 4.4 KEV Alta · 51 CWE-532 04/05/2023

Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability

Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.

CVE-2021-25489 Média · 5.5 KEV Alta · 45 CWE-134 06/10/2021

Samsung Mobile Devices Improper Input Validation Vulnerability

Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic.

CVE-2021-25487 Alta · 7.8 KEV Alta · 48 CWE-125 06/10/2021

Samsung Mobile Devices Out-of-Bounds Read Vulnerability

Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer.

CVE-2021-25395 Média · 6.4 KEV CWE-362 11/06/2021

Samsung Mobile Devices Race Condition Vulnerability

A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.

CVE-2021-25394 Média · 6.4 KEV CWE-362 11/06/2021

Samsung Mobile Devices Race Condition Vulnerability

A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised.

CVE-2021-25370 Média · 4.4 KEV Alta · 47 CWE-416 26/03/2021

Samsung Mobile Devices Memory Corruption Vulnerability

An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic.

CVE-2021-25369 Média · 5.5 KEV Alta · 48 CWE-200 26/03/2021

Samsung Mobile Devices Improper Access Control Vulnerability

An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.

CVE-2021-25372 Média · 6.7 KEV Alta · 46 CWE-787 26/03/2021

Samsung Mobile Devices Improper Boundary Check Vulnerability

An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.

CVE-2021-25371 Média · 6.7 KEV Alta · 46 CWE-912 26/03/2021

Samsung Mobile Devices Unspecified Vulnerability

A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.

CVE-2021-25337 Alta · 7.1 KEV Alta · 60 Exploit público CWE-269 04/03/2021

Samsung Mobile Devices Improper Access Control Vulnerability

Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files.