Vulnerabilidades do Samsung Mobile Samsung Mobile Devices
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Samsung Mobile Samsung Mobile Devices: 144 registro(s), com versões afetadas e correções.
CVE-2026-21047
Alta · 8.3
CWE-787 28/07/2026
Out-of-bounds Write em Samsung Mobile Samsung Mobile Devices
Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to potentially execute arbitrary code.
CVE-2026-21052
Média · 6.8
10/07/2026
Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local…
Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system privilege.
CVE-2026-21051
Média · 5.1
10/07/2026
Incorrect default permissions in WLAN security prior to SMR Jul-2026 Release 1 allows…
Incorrect default permissions in WLAN security prior to SMR Jul-2026 Release 1 allows local attackers to configure TencentWifiSecurity settings.
CVE-2026-21050
Média · 5.1
10/07/2026
Improper access control in SmartThingsKit prior to SMR Jul-2026 Release 1 allows local…
Improper access control in SmartThingsKit prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21049
Alta · 8.4
10/07/2026
Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local…
Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary code.
CVE-2026-21048
Alta · 8.3
10/07/2026
Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR…
Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory.
CVE-2026-21046
Alta · 8.4
10/07/2026
Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR…
Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR Jul-2026 Release 1 allows local privileged attackers to execute arbitrary code.
CVE-2026-21045
Alta · 8.3
10/07/2026
Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR…
Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory.
CVE-2026-21044
Média · 5.8
10/07/2026
Improper authorization in KnoxGuardManager prior to SMR Jul-2026 Release 1 allows local…
Improper authorization in KnoxGuardManager prior to SMR Jul-2026 Release 1 allows local attackers to bypass the persistence configuration of the application.
CVE-2026-21043
Média · 6.7
10/07/2026
Path traversal in Wallpaper service prior to SMR Jul-2026 Release 1 allows local…
Path traversal in Wallpaper service prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system server privilege.
CVE-2026-21042
Alta · 8.7
10/07/2026
Out-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows remote…
Out-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows remote attackers to execute arbitrary code.
CVE-2026-21041
Média · 6.9
10/07/2026
Improper access control in SamsungSEAgentService prior to SMR Jul-2026 Release 1 allows…
Improper access control in SamsungSEAgentService prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21040
Média · 6.9
10/07/2026
Improper access control in IAFDService prior to SMR Jul-2026 Release 1 allows local…
Improper access control in IAFDService prior to SMR Jul-2026 Release 1 allows local privileged attackers to use the privileged APIs.
CVE-2026-21039
Média · 6.9
10/07/2026
Improper access control in Settings prior to SMR Jul-2026 Release 1 allows local…
Improper access control in Settings prior to SMR Jul-2026 Release 1 allows local attackers to configure Theft protection settings.
CVE-2026-21031
Alta · 7.8
CWE-863 05/06/2026
Incorrect Authorization em Samsung Android
Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. User interaction is required for triggering this vulnerability.
CVE-2026-21030
Alta · 7.8
05/06/2026
Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows…
Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger privileged functions.
CVE-2026-21029
Alta · 7.8
05/06/2026
Improper export of android application components in Galaxy Editing Service prior to SMR…
Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 allows local attacker to execute privileged operations.
CVE-2026-21028
Média · 5.5
05/06/2026
Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local…
Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21027
Baixa · 3.3
05/06/2026
Improper export of android application components in ImsSettings prior to SMR Jun-2026…
Improper export of android application components in ImsSettings prior to SMR Jun-2026 Release 1 allows local attackers to trigger logging function.
CVE-2026-21026
Média · 5.5
05/06/2026
Improper export of android application components in SpriteWallpaper prior to SMR…
Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attackers to access to sensitive information.
CVE-2026-21025
Média · 5.5
05/06/2026
Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local…
Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21017
Média · 5.5
05/06/2026
Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR…
Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attackers to access privileged files.
CVE-2026-21022
Média · 5.5
13/05/2026
Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release…
Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21021
Média · 6.8
13/05/2026
Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical…
Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity.
CVE-2026-21020
Alta · 7.8
13/05/2026
Improper export of android application components in OmaCP prior to SMR May-2026 Release…
Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers to trigger privileged functions.