Vulnerabilidades de Samsung
CVEs publicadas que afetam produtos de Samsung: 293 registro(s), com severidade, exploração e correções.
Android 114Exynos 1380 Firmware 49Exynos 1480 Firmware 45Exynos 1330 Firmware 43Exynos 1280 Firmware 43Exynos 1580 Firmware 42Exynos 850 Firmware 36Exynos 980 Firmware 32Exynos W930 Firmware 31Exynos W920 Firmware 31Exynos 2400 Firmware 31Exynos 1080 Firmware 29Exynos W1000 Firmware 28Exynos 2200 Firmware 26Exynos 2500 Firmware 21Escargot 18Exynos 990 Firmware 17Smart Switch 16Exynos 2100 Firmware 15Exynos 9110 Firmware 14One 9Exynos Modem 5123 Firmware 9Exynos Modem 5300 Firmware 8Exynos Modem 5400 Firmware 8Notes 7Modem 5123 Firmware 7Rlottie 6Modem 5400 Firmware 6Magicinfo 9 Server 5Galaxy Store 5Account 4Health 4Members 4Assistant 3Modem 5300 Firmware 3Internet 2Motionphoto 2Walrus 2Exynos 9820 Firmware 1Exynos 8890 firmware 1
CVE-2026-21082
Média · 5.5
CWE-23 10/08/2026
Relative Path Traversal em Samsung Health
Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
CVE-2026-21080
Média · 6.5
CWE-312 10/08/2026
Cleartext Storage of Sensitive Information em Samsung Smart Switch
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.
CVE-2026-21079
Média · 6.5
CWE-311 10/08/2026
Missing Encryption of Sensitive Data em Samsung Smart Switch
Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.
CVE-2026-21078
Média · 6.5
CWE-345 10/08/2026
Insufficient Verification of Data Authenticity em Samsung Smart Switch
Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity.
CVE-2026-21077
Média · 5.5
CWE-863 10/08/2026
Incorrect Authorization em Samsung Health
Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
CVE-2026-21076
Média · 5.5
CWE-863 10/08/2026
Incorrect Authorization em Samsung Health
Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
CVE-2026-21073
Média · 6.1
10/08/2026
Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows…
Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity.
CVE-2026-21072
Alta · 7.8
CWE-20 10/08/2026
Improper Input Validation em Samsung Android
Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21071
Alta · 7.8
CWE-20 10/08/2026
Improper Input Validation em Samsung Android
Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21070
Média · 4.6
CWE-20 10/08/2026
Improper Input Validation em Samsung Android
Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information.
CVE-2026-21069
Alta · 7.8
CWE-681 10/08/2026
Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR…
Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21068
Alta · 7.8
CWE-121 10/08/2026
Stack-based Buffer Overflow em Samsung Android
Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code.
CVE-2026-21067
Alta · 7.8
10/08/2026
Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local…
Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21066
Alta · 7.8
CWE-20 10/08/2026
Improper Input Validation em Samsung Android
Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21065
Alta · 7.8
CWE-20 10/08/2026
Improper Input Validation em Samsung Android
Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21064
Média · 5.5
CWE-284 10/08/2026
Improper Access Control em Samsung Android
Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability.
CVE-2026-21063
Média · 6.1
CWE-926 10/08/2026
Improper export of android application components in AppLock prior to SMR Aug-2026…
Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function.
CVE-2026-21062
Baixa · 3.3
CWE-939 10/08/2026
Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local…
Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.
CVE-2026-21061
Média · 6.5
CWE-20 10/08/2026
Improper Input Validation em Samsung Android
Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction is required for triggering this vulnerability.
CVE-2026-21060
Média · 4.6
CWE-20 10/08/2026
Improper Input Validation em Samsung Android
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles.
CVE-2026-21059
Alta · 7.1
CWE-926 10/08/2026
Improper export of android application components in Samsung Contacts prior to SMR…
Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.
CVE-2026-21058
Alta · 7.1
CWE-20 10/08/2026
Improper Input Validation em Samsung Android
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.
CVE-2026-18772
Média · 6.5
CWE-1325 04/08/2026
Improperly controlled sequential memory allocation vulnerability in Samsung Open Source…
Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion.
CVE-2026-15551
Média · 5.5
CWE-190 12/07/2026
Samsung rlottie: Numeric truncation in gray_hline() leads to heap-based buffer overflow when rendering a crafted Lottie animation at native canvas size
Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Overflow Buffers.
This issue affects .
CVE-2026-21038
Média · 5.5
CWE-125 05/06/2026
Out-of-bounds Read em Samsung Android Usb Driver
Improper input validation in Samsung Android USB Driver for Windows prior to version 1.9.5.0 allows local attacker to access out-of-bounds memory.