CVE Intelligence

Vulnerabilidades de Samsung Mobile

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Samsung Mobile: 237 registro(s), com severidade, exploração e correções.

Samsung Mobile Devices 144Smart Switch 19Samsung Notes 7Samsung Health 5Samsung Account 5Galaxy Store 4Samsung Internet 4Samsung Members 3Samsung Assistant 3Samsung Checkout 3Samsung Flow 3Galaxy Wearable 2Samsung Email 2Retail Mode 2Bixby 2Samsung Cloud Assistant 2MotionPhoto 2Libsavscmn.so 1Watch Plugin 1Visual Voicemail 1Bixby Touch 1Collection 1SmartThings 1SamsungPassAutofill 1My Galaxy 1Samsung Pass 1Samsung Tips 1InputSharing 1Libsthmbc 1Samsung Voice Recorder 1Routines 1SmartTouchCall 1Galaxy Store for Galaxy Watch 1Samsung Camera 1Samsung Plus TV 1Samsung Android USB Driver for Windows 1Samsung Auto 1Samsung Cloud 1GalaxyDiagnostics 1Samsung System Support Service 1

Somente exploradas (KEV) →

CVE-2025-58486 Média · 5.5 01/12/2025
Improper input validation in Samsung Account prior to version 15.5.01.1 allows local…
Improper input validation in Samsung Account prior to version 15.5.01.1 allows local attacker to execute arbitrary script.
CVE-2025-58485 Média · 5.5 01/12/2025
Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local…
Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script.
CVE-2025-58484 Média · 4.0 01/12/2025
Incorrect default permissions in Samsung Cloud Assistant prior to version 8.0.03.8…
Incorrect default permissions in Samsung Cloud Assistant prior to version 8.0.03.8 allows local attacker to access partial data in sandbox.
CVE-2025-58483 Baixa · 3.3 01/12/2025
Improper export of android application components in Galaxy Store for Galaxy Watch prior…
Improper export of android application components in Galaxy Store for Galaxy Watch prior to version 1.0.06.29 allows local attacker to install arbitrary application on Galaxy Store.
CVE-2025-58482 Alta · 7.3 01/12/2025
Improper access control in MPLocalService of MotionPhoto prior to version 4.1.51 allows…
Improper access control in MPLocalService of MotionPhoto prior to version 4.1.51 allows local attackers to start privileged service.
CVE-2025-58481 Alta · 7.8 01/12/2025
Improper access control in MPRemoteService of MotionPhoto prior to version 4.1.51 allows…
Improper access control in MPRemoteService of MotionPhoto prior to version 4.1.51 allows local attackers to start privileged service.
CVE-2025-58480 Alta · 7.5 CWE-787 01/12/2025
Out-of-bounds Write em Samsung Android
Heap-based buffer overflow in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.
CVE-2025-58479 Alta · 7.5 CWE-125 01/12/2025
Out-of-bounds Read em Samsung Android
Out-of-bounds read in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.
CVE-2025-58478 Alta · 7.5 CWE-787 01/12/2025
Out-of-bounds Write em Samsung Android
Out-of-bounds write in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.
CVE-2025-58477 Média · 6.5 CWE-787 01/12/2025
Out-of-bounds Write em Samsung Android
Out-of-bounds write in parsing IFD tag in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.
CVE-2025-58476 Média · 4.6 CWE-125 01/12/2025
Out-of-bounds Read em Samsung Android
Out-of-bounds read vulnerability in bootloader prior to SMR Dec-2025 Release 1 allows physical attackers to access out-of-bounds memory.
CVE-2025-58475 Média · 4.4 01/12/2025
Improper input validation in libsec-ril.so prior to SMR Dec-2025 Release 1 allows local…
Improper input validation in libsec-ril.so prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVE-2025-21080 Alta · 7.1 01/12/2025
Improper export of android application components in Dynamic Lockscreen prior to SMR…
Improper export of android application components in Dynamic Lockscreen prior to SMR Dec-2025 Release 1 allows local attackers to access files with Dynamic Lockscreen's privilege.
CVE-2025-21072 Média · 4.4 CWE-787 01/12/2025
Out-of-bounds Write em Samsung Android
Out-of-bounds write in decoding metadata in fingerprint trustlet prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVE-2025-21079 Alta · 8.1 05/11/2025
Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to...
Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability.
CVE-2025-21078 Média · 6.5 05/11/2025
Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows...
Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications.
CVE-2025-21077 Baixa · 3.3 05/11/2025
Improper input validation in Samsung Email prior to version 6.2.06.0 allows local attackers to...
Improper input validation in Samsung Email prior to version 6.2.06.0 allows local attackers to launch arbitrary activity with Samsung Email privilege.
CVE-2025-21076 Média · 5.5 05/11/2025
Improper handling of insufficient permissions or privileges in Samsung Account prior to version...
Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows local attackers to access data in Samsung Account. User interaction is required for triggering this vulnerability.
CVE-2025-21075 Alta · 7.5 CWE-787 05/11/2025
Out-of-bounds write in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote...
Out-of-bounds write in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory.
CVE-2025-21074 Alta · 7.5 CWE-125 05/11/2025
Out-of-bounds read in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote...
Out-of-bounds read in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory.
CVE-2025-21073 Média · 4.1 05/11/2025
Insecure default configuration in USB connection mode prior to SMR Nov-2025 Release 1 allows...
Insecure default configuration in USB connection mode prior to SMR Nov-2025 Release 1 allows privileged physical attackers to access user data. User interaction is required for triggering this vulnerability.
CVE-2025-21071 Média · 4.4 CWE-787 05/11/2025
Out-of-bounds write in handling opcode in fingerprint trustlet prior to SMR Nov-2025 Release 1...
Out-of-bounds write in handling opcode in fingerprint trustlet prior to SMR Nov-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVE-2025-21070 Média · 5.5 CWE-787 10/10/2025
Out-of-bounds Write em Samsung Notes
Out-of-bounds write in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to write out-of-bounds memory.
CVE-2025-21069 Alta · 7.1 CWE-125 10/10/2025
Out-of-bounds Read em Samsung Notes
Out-of-bounds read in the parsing of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
CVE-2025-21068 Alta · 7.1 CWE-125 10/10/2025
Out-of-bounds Read em Samsung Notes
Out-of-bounds read in the reading of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.