CVE Intelligence

Vulnerabilidades de Samsung Mobile

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Samsung Mobile: 237 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2025-21067 Alta · 7.1 CWE-125 10/10/2025
Out-of-bounds Read em Samsung Notes
Out-of-bounds read in the allocation of image buffer in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
CVE-2025-21066 Alta · 7.1 CWE-125 10/10/2025
Out-of-bounds Read em Samsung Notes
Out-of-bounds read in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
CVE-2025-21065 Média · 6.6 10/10/2025
Improper input validation in Retail Mode prior to version 5.59.11 allows self attackers…
Improper input validation in Retail Mode prior to version 5.59.11 allows self attackers to execute privileged commands on their own devices.
CVE-2025-21064 Média · 6.5 10/10/2025
Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent…
Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data.
CVE-2025-21063 Média · 4.6 10/10/2025
Improper access control in Samsung Voice Recorder prior to version 21.5.73.12 in Android…
Improper access control in Samsung Voice Recorder prior to version 21.5.73.12 in Android 15 and 21.5.81.40 in Android 16 allows physical attackers to access recording files on the lock screen.
CVE-2025-21062 Alta · 7.8 CWE-327 10/10/2025
Use of a Broken or Risky Cryptographic Algorithm em Samsung Smart Switch
Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability.
CVE-2025-21061 Média · 5.5 CWE-312 10/10/2025
Cleartext Storage of Sensitive Information em Samsung Smart Switch
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive data. User interaction is required for triggering this vulnerability.
CVE-2025-21060 Média · 5.5 CWE-312 10/10/2025
Cleartext Storage of Sensitive Information em Samsung Smart Switch
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability.
CVE-2025-21059 Média · 5.5 10/10/2025
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local…
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health.
CVE-2025-21058 Alta · 7.3 10/10/2025
Improper access control in Routines prior to version 4.8.7.1 in Android 15 and 4.9.6.0…
Improper access control in Routines prior to version 4.8.7.1 in Android 15 and 4.9.6.0 in Android 16 allows local attackers to potentially execute arbitrary code with SystemUI privilege.
CVE-2025-21057 Baixa · 3.3 10/10/2025
Use of implicit intent for sensitive communication in Samsung Notes prior to version…
Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allows local attackers to access shared notes.
CVE-2025-21055 Alta · 7.5 CWE-125 10/10/2025
Out-of-bounds Read em Samsung Android
Out-of-bounds read and write in libimagecodec.quram.so prior to SMR Oct-2025 Release 1 allows remote attackers to access out-of-bounds memory.
CVE-2025-21054 Média · 5.5 CWE-125 10/10/2025
Out-of-bounds Read em Samsung Android
Out-of-bounds read in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to potentially access out-of-bounds memory.
CVE-2025-21053 Alta · 7.8 CWE-787 10/10/2025
Out-of-bounds Write em Samsung Android
Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
CVE-2025-21052 Alta · 7.8 CWE-787 10/10/2025
Out-of-bounds Write em Samsung Android
Out-of-bounds write under specific condition in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
CVE-2025-21051 Alta · 7.8 CWE-787 10/10/2025
Out-of-bounds Write em Samsung Android
Out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2025-21050 Média · 5.5 10/10/2025
Improper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local…
Improper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local attackers to access data across multiple user profiles.
CVE-2025-21049 Média · 5.5 10/10/2025
Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local…
Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.
CVE-2025-21048 Alta · 7.8 CWE-22 10/10/2025
Path Traversal em Samsung Android
Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to execute arbitrary code.
CVE-2025-21047 Média · 6.8 10/10/2025
Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical…
Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs.
CVE-2025-21046 Baixa · 2.4 10/10/2025
Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1…
Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list.
CVE-2025-21045 Média · 5.5 CWE-922 10/10/2025
Insecure Storage of Sensitive Information em Samsung Wear Os
Insecure storage of sensitive information in Galaxy Watch prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information.
CVE-2025-21044 Média · 4.4 CWE-787 10/10/2025
Out-of-bounds Write em Samsung Android
Out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVE-2025-21056 Média · 6.6 25/09/2025
Improper input validation in Retail Mode prior to version 5.59.4 allows self attackers…
Improper input validation in Retail Mode prior to version 5.59.4 allows self attackers to execute privileged commands on their own devices.
CVE-2025-21043 Crítica · 9.8 KEV Alta · 57 CWE-787 12/09/2025
Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.