Vulnerabilidades de Samsung
CVEs publicadas que afetam produtos de Samsung: 293 registro(s), com severidade, exploração e correções.
Android 114Exynos 1380 Firmware 49Exynos 1480 Firmware 45Exynos 1330 Firmware 43Exynos 1280 Firmware 43Exynos 1580 Firmware 42Exynos 850 Firmware 36Exynos 980 Firmware 32Exynos W930 Firmware 31Exynos W920 Firmware 31Exynos 2400 Firmware 31Exynos 1080 Firmware 29Exynos W1000 Firmware 28Exynos 2200 Firmware 26Exynos 2500 Firmware 21Escargot 18Exynos 990 Firmware 17Smart Switch 16Exynos 2100 Firmware 15Exynos 9110 Firmware 14One 9Exynos Modem 5123 Firmware 9Exynos Modem 5300 Firmware 8Exynos Modem 5400 Firmware 8Notes 7Modem 5123 Firmware 7Rlottie 6Modem 5400 Firmware 6Magicinfo 9 Server 5Galaxy Store 5Account 4Health 4Members 4Assistant 3Modem 5300 Firmware 3Internet 2Motionphoto 2Walrus 2Exynos 9820 Firmware 1Exynos 8890 firmware 1
CVE-2025-26782
Alta · 7.5
CWE-400 20/10/2025
Uncontrolled Resource Consumption em Samsung Exynos W920 Firmware
An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 9110, W920, W930, Modem 5123, and Modem 5300. Incorrect handling of RLC AM PDUs leads to a Denial of Service.
CVE-2025-26781
Alta · 7.5
CWE-20 20/10/2025
Improper Input Validation em Samsung Exynos W920 Firmware
An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 9110, W920, W930, Modem 5123, and Modem 5300. Incorrect handling of RLC AM PDUs leads to a Denial of Service.
CVE-2024-55568
Alta · 7.5
CWE-400 20/10/2025
Uncontrolled Resource Consumption em Samsung Exynos 1080 Firmware
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The absence of a NULL check leads to a Denial of Service when an attacker sends malformed MM packets to the target.
CVE-2025-21070
Média · 5.5
CWE-787 10/10/2025
Out-of-bounds Write em Samsung Notes
Out-of-bounds write in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to write out-of-bounds memory.
CVE-2025-21069
Alta · 7.1
CWE-125 10/10/2025
Out-of-bounds Read em Samsung Notes
Out-of-bounds read in the parsing of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
CVE-2025-21068
Alta · 7.1
CWE-125 10/10/2025
Out-of-bounds Read em Samsung Notes
Out-of-bounds read in the reading of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
CVE-2025-21067
Alta · 7.1
CWE-125 10/10/2025
Out-of-bounds Read em Samsung Notes
Out-of-bounds read in the allocation of image buffer in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
CVE-2025-21066
Alta · 7.1
CWE-125 10/10/2025
Out-of-bounds Read em Samsung Notes
Out-of-bounds read in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
CVE-2025-21064
Média · 6.5
10/10/2025
Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent…
Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data.
CVE-2025-21063
Média · 4.6
10/10/2025
Improper access control in Samsung Voice Recorder prior to version 21.5.73.12 in Android…
Improper access control in Samsung Voice Recorder prior to version 21.5.73.12 in Android 15 and 21.5.81.40 in Android 16 allows physical attackers to access recording files on the lock screen.
CVE-2025-21062
Alta · 7.8
CWE-327 10/10/2025
Use of a Broken or Risky Cryptographic Algorithm em Samsung Smart Switch
Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability.
CVE-2025-21061
Média · 5.5
CWE-312 10/10/2025
Cleartext Storage of Sensitive Information em Samsung Smart Switch
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive data. User interaction is required for triggering this vulnerability.
CVE-2025-21060
Média · 5.5
CWE-312 10/10/2025
Cleartext Storage of Sensitive Information em Samsung Smart Switch
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability.
CVE-2025-21059
Média · 5.5
10/10/2025
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local…
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health.
CVE-2025-21057
Baixa · 3.3
10/10/2025
Use of implicit intent for sensitive communication in Samsung Notes prior to version…
Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allows local attackers to access shared notes.
CVE-2025-21055
Alta · 7.5
CWE-125 10/10/2025
Out-of-bounds Read em Samsung Android
Out-of-bounds read and write in libimagecodec.quram.so prior to SMR Oct-2025 Release 1 allows remote attackers to access out-of-bounds memory.
CVE-2025-21054
Média · 5.5
CWE-125 10/10/2025
Out-of-bounds Read em Samsung Android
Out-of-bounds read in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to potentially access out-of-bounds memory.
CVE-2025-21053
Alta · 7.8
CWE-787 10/10/2025
Out-of-bounds Write em Samsung Android
Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
CVE-2025-21052
Alta · 7.8
CWE-787 10/10/2025
Out-of-bounds Write em Samsung Android
Out-of-bounds write under specific condition in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
CVE-2025-21051
Alta · 7.8
CWE-787 10/10/2025
Out-of-bounds Write em Samsung Android
Out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2025-21050
Média · 5.5
10/10/2025
Improper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local…
Improper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local attackers to access data across multiple user profiles.
CVE-2025-21049
Média · 5.5
10/10/2025
Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local…
Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.
CVE-2025-21048
Alta · 7.8
CWE-22 10/10/2025
Path Traversal em Samsung Android
Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to execute arbitrary code.
CVE-2025-21047
Média · 6.8
10/10/2025
Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical…
Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs.
CVE-2025-21046
Baixa · 2.4
10/10/2025
Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1…
Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list.