Vulnerabilidades de Samsung Mobile
CVEs publicadas que afetam produtos de Samsung Mobile: 237 registro(s), com severidade, exploração e correções.
Samsung Mobile Devices 144Smart Switch 19Samsung Notes 7Samsung Health 5Samsung Account 5Galaxy Store 4Samsung Internet 4Samsung Members 3Samsung Assistant 3Samsung Checkout 3Samsung Flow 3Galaxy Wearable 2Samsung Email 2Retail Mode 2Bixby 2Samsung Cloud Assistant 2MotionPhoto 2Libsavscmn.so 1Watch Plugin 1Visual Voicemail 1Bixby Touch 1Collection 1SmartThings 1SamsungPassAutofill 1My Galaxy 1Samsung Pass 1Samsung Tips 1InputSharing 1Libsthmbc 1Samsung Voice Recorder 1Routines 1SmartTouchCall 1Galaxy Store for Galaxy Watch 1Samsung Camera 1Samsung Plus TV 1Samsung Android USB Driver for Windows 1Samsung Auto 1Samsung Cloud 1GalaxyDiagnostics 1Samsung System Support Service 1
CVE-2025-21067
Alta · 7.1
CWE-125 10/10/2025
Out-of-bounds Read em Samsung Notes
Out-of-bounds read in the allocation of image buffer in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
CVE-2025-21066
Alta · 7.1
CWE-125 10/10/2025
Out-of-bounds Read em Samsung Notes
Out-of-bounds read in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
CVE-2025-21065
Média · 6.6
10/10/2025
Improper input validation in Retail Mode prior to version 5.59.11 allows self attackers…
Improper input validation in Retail Mode prior to version 5.59.11 allows self attackers to execute privileged commands on their own devices.
CVE-2025-21064
Média · 6.5
10/10/2025
Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent…
Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data.
CVE-2025-21063
Média · 4.6
10/10/2025
Improper access control in Samsung Voice Recorder prior to version 21.5.73.12 in Android…
Improper access control in Samsung Voice Recorder prior to version 21.5.73.12 in Android 15 and 21.5.81.40 in Android 16 allows physical attackers to access recording files on the lock screen.
CVE-2025-21062
Alta · 7.8
CWE-327 10/10/2025
Use of a Broken or Risky Cryptographic Algorithm em Samsung Smart Switch
Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability.
CVE-2025-21061
Média · 5.5
CWE-312 10/10/2025
Cleartext Storage of Sensitive Information em Samsung Smart Switch
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive data. User interaction is required for triggering this vulnerability.
CVE-2025-21060
Média · 5.5
CWE-312 10/10/2025
Cleartext Storage of Sensitive Information em Samsung Smart Switch
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability.
CVE-2025-21059
Média · 5.5
10/10/2025
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local…
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health.
CVE-2025-21058
Alta · 7.3
10/10/2025
Improper access control in Routines prior to version 4.8.7.1 in Android 15 and 4.9.6.0…
Improper access control in Routines prior to version 4.8.7.1 in Android 15 and 4.9.6.0 in Android 16 allows local attackers to potentially execute arbitrary code with SystemUI privilege.
CVE-2025-21057
Baixa · 3.3
10/10/2025
Use of implicit intent for sensitive communication in Samsung Notes prior to version…
Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allows local attackers to access shared notes.
CVE-2025-21055
Alta · 7.5
CWE-125 10/10/2025
Out-of-bounds Read em Samsung Android
Out-of-bounds read and write in libimagecodec.quram.so prior to SMR Oct-2025 Release 1 allows remote attackers to access out-of-bounds memory.
CVE-2025-21054
Média · 5.5
CWE-125 10/10/2025
Out-of-bounds Read em Samsung Android
Out-of-bounds read in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to potentially access out-of-bounds memory.
CVE-2025-21053
Alta · 7.8
CWE-787 10/10/2025
Out-of-bounds Write em Samsung Android
Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
CVE-2025-21052
Alta · 7.8
CWE-787 10/10/2025
Out-of-bounds Write em Samsung Android
Out-of-bounds write under specific condition in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
CVE-2025-21051
Alta · 7.8
CWE-787 10/10/2025
Out-of-bounds Write em Samsung Android
Out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2025-21050
Média · 5.5
10/10/2025
Improper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local…
Improper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local attackers to access data across multiple user profiles.
CVE-2025-21049
Média · 5.5
10/10/2025
Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local…
Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.
CVE-2025-21048
Alta · 7.8
CWE-22 10/10/2025
Path Traversal em Samsung Android
Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to execute arbitrary code.
CVE-2025-21047
Média · 6.8
10/10/2025
Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical…
Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs.
CVE-2025-21046
Baixa · 2.4
10/10/2025
Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1…
Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list.
CVE-2025-21045
Média · 5.5
CWE-922 10/10/2025
Insecure Storage of Sensitive Information em Samsung Wear Os
Insecure storage of sensitive information in Galaxy Watch prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information.
CVE-2025-21044
Média · 4.4
CWE-787 10/10/2025
Out-of-bounds Write em Samsung Android
Out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVE-2025-21056
Média · 6.6
25/09/2025
Improper input validation in Retail Mode prior to version 5.59.4 allows self attackers…
Improper input validation in Retail Mode prior to version 5.59.4 allows self attackers to execute privileged commands on their own devices.
CVE-2025-21043
Crítica · 9.8
KEV Alta · 57 CWE-787 12/09/2025
Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.