Vulnerabilidades de Samsung Mobile

CVE-2026-21090 Alta · 7.8 CWE-787 09/09/2026

Out-of-bounds Write em Samsung Android

Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21089 Alta · 7.8 CWE-20 09/09/2026

Improper Input Validation em Samsung Android

Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21088 Alta · 7.8 CWE-20 09/09/2026

Improper Input Validation em Samsung Android

Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21087 Alta · 7.8 CWE-787 09/09/2026

Out-of-bounds Write em Samsung Android

Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege.

CVE-2026-21086 Alta · 7.8 CWE-20 09/09/2026

Improper Input Validation em Samsung Android

Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to access proxy configuration.

CVE-2026-21085 Média · 6.7 CWE-787 09/09/2026

Out-of-bounds Write em Samsung Android

Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.

CVE-2026-21084 Média · 6.9 CWE-284 10/08/2026

Improper Access Control em Samsung Mobile SmartThings

Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information.

CVE-2026-21083 Média · 6.5 CWE-20 10/08/2026

Improper Input Validation em Samsung Smart Switch

Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.

CVE-2026-21082 Média · 5.5 CWE-23 10/08/2026

Relative Path Traversal em Samsung Health

Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.

CVE-2026-21081 Média · 5.1 CWE-926 10/08/2026

Improper export of android application components in SamsungPassAutofill prior to…

Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.

CVE-2026-21080 Média · 6.5 CWE-312 10/08/2026

Cleartext Storage of Sensitive Information em Samsung Smart Switch

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.

CVE-2026-21079 Média · 6.5 CWE-311 10/08/2026

Missing Encryption of Sensitive Data em Samsung Smart Switch

Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.

CVE-2026-21078 Média · 6.5 CWE-345 10/08/2026

Insufficient Verification of Data Authenticity em Samsung Smart Switch

Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity.

CVE-2026-21077 Média · 5.5 CWE-863 10/08/2026

Incorrect Authorization em Samsung Health

Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.

CVE-2026-21076 Média · 5.5 CWE-863 10/08/2026

Incorrect Authorization em Samsung Health

Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.

CVE-2026-21075 Média · 5.3 CWE-939 10/08/2026

Improper authorization in handler for custom URL scheme in My Galaxy prior to version…

Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3 allows remote attackers to access sensitive information.

CVE-2026-21074 Alta · 7.2 CWE-276 10/08/2026

Incorrect Default Permissions em Samsung Mobile Bixby

Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands with Bixby privilege.

CVE-2026-21073 Média · 6.1 10/08/2026

Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows…

Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity.

CVE-2026-21072 Alta · 7.8 CWE-20 10/08/2026

Improper Input Validation em Samsung Android

Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21071 Alta · 7.8 CWE-20 10/08/2026

Improper Input Validation em Samsung Android

Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21070 Média · 4.6 CWE-20 10/08/2026

Improper Input Validation em Samsung Android

Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information.

CVE-2026-21069 Alta · 7.8 CWE-681 10/08/2026

Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR…

Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21068 Alta · 7.8 CWE-121 10/08/2026

Stack-based Buffer Overflow em Samsung Android

Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code.

CVE-2026-21067 Alta · 7.8 10/08/2026

Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local…

Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21066 Alta · 7.8 CWE-20 10/08/2026

Improper Input Validation em Samsung Android

Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.