CVE Intelligence

Vulnerabilidades de Samsung

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Samsung: 293 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2025-26782 Alta · 7.5 CWE-400 20/10/2025
Uncontrolled Resource Consumption em Samsung Exynos W920 Firmware
An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 9110, W920, W930, Modem 5123, and Modem 5300. Incorrect handling of RLC AM PDUs leads to a Denial of Service.
CVE-2025-26781 Alta · 7.5 CWE-20 20/10/2025
Improper Input Validation em Samsung Exynos W920 Firmware
An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 9110, W920, W930, Modem 5123, and Modem 5300. Incorrect handling of RLC AM PDUs leads to a Denial of Service.
CVE-2024-55568 Alta · 7.5 CWE-400 20/10/2025
Uncontrolled Resource Consumption em Samsung Exynos 1080 Firmware
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400. The absence of a NULL check leads to a Denial of Service when an attacker sends malformed MM packets to the target.
CVE-2025-21070 Média · 5.5 CWE-787 10/10/2025
Out-of-bounds Write em Samsung Notes
Out-of-bounds write in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to write out-of-bounds memory.
CVE-2025-21069 Alta · 7.1 CWE-125 10/10/2025
Out-of-bounds Read em Samsung Notes
Out-of-bounds read in the parsing of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
CVE-2025-21068 Alta · 7.1 CWE-125 10/10/2025
Out-of-bounds Read em Samsung Notes
Out-of-bounds read in the reading of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
CVE-2025-21067 Alta · 7.1 CWE-125 10/10/2025
Out-of-bounds Read em Samsung Notes
Out-of-bounds read in the allocation of image buffer in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
CVE-2025-21066 Alta · 7.1 CWE-125 10/10/2025
Out-of-bounds Read em Samsung Notes
Out-of-bounds read in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.
CVE-2025-21064 Média · 6.5 10/10/2025
Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent…
Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data.
CVE-2025-21063 Média · 4.6 10/10/2025
Improper access control in Samsung Voice Recorder prior to version 21.5.73.12 in Android…
Improper access control in Samsung Voice Recorder prior to version 21.5.73.12 in Android 15 and 21.5.81.40 in Android 16 allows physical attackers to access recording files on the lock screen.
CVE-2025-21062 Alta · 7.8 CWE-327 10/10/2025
Use of a Broken or Risky Cryptographic Algorithm em Samsung Smart Switch
Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability.
CVE-2025-21061 Média · 5.5 CWE-312 10/10/2025
Cleartext Storage of Sensitive Information em Samsung Smart Switch
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive data. User interaction is required for triggering this vulnerability.
CVE-2025-21060 Média · 5.5 CWE-312 10/10/2025
Cleartext Storage of Sensitive Information em Samsung Smart Switch
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability.
CVE-2025-21059 Média · 5.5 10/10/2025
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local…
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health.
CVE-2025-21057 Baixa · 3.3 10/10/2025
Use of implicit intent for sensitive communication in Samsung Notes prior to version…
Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allows local attackers to access shared notes.
CVE-2025-21055 Alta · 7.5 CWE-125 10/10/2025
Out-of-bounds Read em Samsung Android
Out-of-bounds read and write in libimagecodec.quram.so prior to SMR Oct-2025 Release 1 allows remote attackers to access out-of-bounds memory.
CVE-2025-21054 Média · 5.5 CWE-125 10/10/2025
Out-of-bounds Read em Samsung Android
Out-of-bounds read in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to potentially access out-of-bounds memory.
CVE-2025-21053 Alta · 7.8 CWE-787 10/10/2025
Out-of-bounds Write em Samsung Android
Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
CVE-2025-21052 Alta · 7.8 CWE-787 10/10/2025
Out-of-bounds Write em Samsung Android
Out-of-bounds write under specific condition in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
CVE-2025-21051 Alta · 7.8 CWE-787 10/10/2025
Out-of-bounds Write em Samsung Android
Out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2025-21050 Média · 5.5 10/10/2025
Improper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local…
Improper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local attackers to access data across multiple user profiles.
CVE-2025-21049 Média · 5.5 10/10/2025
Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local…
Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.
CVE-2025-21048 Alta · 7.8 CWE-22 10/10/2025
Path Traversal em Samsung Android
Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to execute arbitrary code.
CVE-2025-21047 Média · 6.8 10/10/2025
Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical…
Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs.
CVE-2025-21046 Baixa · 2.4 10/10/2025
Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1…
Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list.