Vulnerabilidades de Samsung

CVE-2026-21104 Média · 6.7 CWE-122 09/09/2026

Heap-based Buffer Overflow em Samsung Android

Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code.

CVE-2026-21103 Média · 6.1 CWE-35 09/09/2026

Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical…

Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.

CVE-2026-21102 Média · 6.7 CWE-416 09/09/2026

Use After Free em Samsung Android

Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.

CVE-2026-21101 Média · 6.7 CWE-20 09/09/2026

Improper Input Validation em Samsung Android

Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege.

CVE-2026-21100 Alta · 7.1 CWE-284 09/09/2026

Improper Access Control em Samsung Android

Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity.

CVE-2026-21099 Média · 5.5 CWE-280 09/09/2026

Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local…

Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information.

CVE-2026-21098 Média · 6.1 CWE-284 09/09/2026

Improper Access Control em Samsung Android

Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction.

CVE-2026-21097 Média · 6.7 CWE-285 09/09/2026

Improper Authorization em Samsung Android

Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity.

CVE-2026-21096 Crítica · 9.8 CWE-122 09/09/2026

Heap-based Buffer Overflow em Samsung Android

Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.

CVE-2026-21095 Crítica · 9.8 CWE-122 09/09/2026

Heap-based Buffer Overflow em Samsung Android

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.

CVE-2026-21094 Alta · 8.8 CWE-20 09/09/2026

Improper Input Validation em Samsung Android

Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory.

CVE-2026-21093 Média · 6.7 CWE-121 09/09/2026

Stack-based Buffer Overflow em Samsung Android

Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.

CVE-2026-21092 Média · 5.3 CWE-35 09/09/2026

Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to…

Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege.

CVE-2026-21091 Alta · 7.8 CWE-787 09/09/2026

Out-of-bounds Write em Samsung Android

Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21090 Alta · 7.8 CWE-787 09/09/2026

Out-of-bounds Write em Samsung Android

Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21089 Alta · 7.8 CWE-20 09/09/2026

Improper Input Validation em Samsung Android

Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21088 Alta · 7.8 CWE-20 09/09/2026

Improper Input Validation em Samsung Android

Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21087 Alta · 7.8 CWE-787 09/09/2026

Out-of-bounds Write em Samsung Android

Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege.

CVE-2026-21086 Alta · 7.8 CWE-20 09/09/2026

Improper Input Validation em Samsung Android

Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to access proxy configuration.

CVE-2026-21085 Média · 6.7 CWE-787 09/09/2026

Out-of-bounds Write em Samsung Android

Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.

CVE-2026-19588 Média · 6.5 CWE-680 12/08/2026

Integer Overflow to Buffer Overflow em Samsung Rlottie

Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.

CVE-2026-19587 Média · 6.5 CWE-400 12/08/2026

Uncontrolled Resource Consumption em Samsung Rlottie

Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation.

CVE-2026-19518 Média · 6.5 CWE-1284 11/08/2026

Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source…

Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation.

CVE-2026-19517 Média · 6.5 CWE-770 11/08/2026

Allocation of Resources Without Limits or Throttling em Samsung Rlottie

Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Excessive Allocation.

CVE-2026-21083 Média · 6.5 CWE-20 10/08/2026

Improper Input Validation em Samsung Smart Switch

Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.