Vulnerabilidades de Samsung
CVEs publicadas que afetam produtos de Samsung: 293 registro(s), com severidade, exploração e correções.
Android 114Exynos 1380 Firmware 49Exynos 1480 Firmware 45Exynos 1330 Firmware 43Exynos 1280 Firmware 43Exynos 1580 Firmware 42Exynos 850 Firmware 36Exynos 980 Firmware 32Exynos W930 Firmware 31Exynos W920 Firmware 31Exynos 2400 Firmware 31Exynos 1080 Firmware 29Exynos W1000 Firmware 28Exynos 2200 Firmware 26Exynos 2500 Firmware 21Escargot 18Exynos 990 Firmware 17Smart Switch 16Exynos 2100 Firmware 15Exynos 9110 Firmware 14One 9Exynos Modem 5123 Firmware 9Exynos Modem 5300 Firmware 8Exynos Modem 5400 Firmware 8Notes 7Modem 5123 Firmware 7Rlottie 6Modem 5400 Firmware 6Magicinfo 9 Server 5Galaxy Store 5Account 4Health 4Members 4Assistant 3Modem 5300 Firmware 3Internet 2Motionphoto 2Walrus 2Exynos 9820 Firmware 1Exynos 8890 firmware 1
CVE-2025-21079
Alta · 8.1
05/11/2025
Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote…
Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability.
CVE-2025-21078
Média · 6.5
05/11/2025
Use of insufficiently random value of secretKey in Smart Switch prior to version…
Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications.
CVE-2025-21077
Baixa · 3.3
05/11/2025
Improper input validation in Samsung Email prior to version 6.2.06.0 allows local…
Improper input validation in Samsung Email prior to version 6.2.06.0 allows local attackers to launch arbitrary activity with Samsung Email privilege.
CVE-2025-21076
Média · 5.5
05/11/2025
Improper handling of insufficient permissions or privileges in Samsung Account prior to…
Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows local attackers to access data in Samsung Account. User interaction is required for triggering this vulnerability.
CVE-2025-21075
Alta · 7.5
CWE-787 05/11/2025
Out-of-bounds Write em Samsung Android
Out-of-bounds write in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory.
CVE-2025-21074
Alta · 7.5
CWE-125 05/11/2025
Out-of-bounds Read em Samsung Android
Out-of-bounds read in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory.
CVE-2025-21073
Média · 4.1
05/11/2025
Insecure default configuration in USB connection mode prior to SMR Nov-2025 Release 1…
Insecure default configuration in USB connection mode prior to SMR Nov-2025 Release 1 allows privileged physical attackers to access user data. User interaction is required for triggering this vulnerability.
CVE-2025-21071
Média · 4.4
CWE-787 05/11/2025
Out-of-bounds Write em Samsung Android
Out-of-bounds write in handling opcode in fingerprint trustlet prior to SMR Nov-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVE-2025-54335
Média · 6.5
CWE-416 04/11/2025
Use After Free em Samsung Exynos 1480 Firmware
An issue was discovered in the GPU driver in Samsung Mobile Processor Exynos 1480, 2400, 1580, 2500. There is a use-after-free in the Xclipse GPU Driver.
CVE-2025-52910
Crítica · 9.8
CWE-416 04/11/2025
Use After Free em Samsung Exynos 1280 Firmware
An issue was discovered in the GPU in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1330, 1380, 1480, 2400. A Use-After-Free leads to privilege escalation.
CVE-2025-27374
Média · 5.3
CWE-787 04/11/2025
Out-of-bounds Write em Samsung Exynos 9825 Firmware
An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850, 1080, 1280, 2200, 1330, 1380, 1480, 2400. The lack of a length check leads to out-of-bounds writes.
CVE-2024-56426
Alta · 7.5
CWE-787 04/11/2025
Out-of-bounds Write em Samsung Exynos 1080 Firmware
An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000. The lack of a length check leads to out-of-bounds writes via malformed USB packets to the target.
CVE-2025-54327
Média · 6.5
CWE-20 04/11/2025
Improper Input Validation em Samsung Exynos 1280 Firmware
An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1380, W920, W930, W1000. Improper input validation in the VTS driver leads to an arbitrary write.
CVE-2025-49494
Alta · 7.5
CWE-400 04/11/2025
Uncontrolled Resource Consumption em Samsung Modem 5123 Firmware
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 2100, 1280, 2200, 1330, 1380, 1480, 9110, Modem 5123. Mishandling of an 5G NRMM packet leads to a Denial of Service.
CVE-2025-54334
Alta · 7.5
CWE-476 04/11/2025
NULL Pointer Dereference em Samsung Exynos 1280 Firmware
An issue was discovered in the NPU driver in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500. There is a NULL Pointer Dereference of hdev in the __npu_vertex_bootup function.
CVE-2025-52513
Alta · 7.5
CWE-787 04/11/2025
Out-of-bounds Write em Samsung Exynos 1580 Firmware
An issue was discovered in Samsung Mobile Processor Exynos 2400, 1580, 2500. A race condition in the HTS driver results in an out-of-bounds write, leading to a denial of service.
CVE-2025-52512
Alta · 7.5
CWE-125 04/11/2025
Out-of-bounds Read em Samsung Exynos 1580 Firmware
An issue was discovered in Samsung Mobile Processor Exynos 2400, 1580, 2500. A race condition in the HTS driver results in out-of-bounds memory access, leading to a denial of service.
CVE-2025-54333
Média · 5.3
CWE-763 04/11/2025
An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July…
An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Invalid Pointer Dereference of node in the get_vs4l_profiler_node function.
CVE-2025-54325
Média · 5.3
CWE-125 04/11/2025
Out-of-bounds Read em Samsung Exynos 1080 Firmware
An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1080, 1280, 2200, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000. A race condition in the VTS driver results in an out-of-bounds read, leading to an information leak.
CVE-2025-54332
Alta · 7.5
CWE-476 04/11/2025
NULL Pointer Dereference em Samsung Exynos 1380 Firmware
An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is a NULL Pointer Dereference of profiler.node in the npu_vertex_profileoff function.
CVE-2025-54331
Média · 5.3
CWE-822 04/11/2025
Untrusted Pointer Dereference em Samsung Exynos 1380 Firmware
An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Untrusted Pointer Dereference of src_hdr in the copy_ncp_header function.
CVE-2025-54330
Média · 5.3
CWE-125 04/11/2025
Out-of-bounds Read em Samsung Exynos 1380 Firmware
An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Out-of-bounds Read of q->bufs[] in the __is_done_for_me function.
CVE-2025-54329
Alta · 7.5
CWE-122 04/11/2025
Heap-based Buffer Overflow em Samsung Exynos 1280 Firmware
An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. The function used to send a multiple-payloads message (including an SMS message) lacks bounds checking, which can lead to a heap overflow.
CVE-2025-54323
Alta · 7.5
CWE-200 04/11/2025
Exposure of Sensitive Information em Samsung Exynos 1080 Firmware
An issue was discovered in the camera in Samsung Mobile Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, and 1580. Improper debug printing leads to information leakage.
CVE-2025-48025
Média · 4.3
CWE-284 20/10/2025
Improper Access Control em Samsung Exynos 980 Firmware
In Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000, there is an improper access control vulnerability related to a log file.