Vulnerabilidades de Samsung
CVEs publicadas que afetam produtos de Samsung: 293 registro(s), com severidade, exploração e correções.
Android 114Exynos 1380 Firmware 49Exynos 1480 Firmware 45Exynos 1330 Firmware 43Exynos 1280 Firmware 43Exynos 1580 Firmware 42Exynos 850 Firmware 36Exynos 980 Firmware 32Exynos W930 Firmware 31Exynos W920 Firmware 31Exynos 2400 Firmware 31Exynos 1080 Firmware 29Exynos W1000 Firmware 28Exynos 2200 Firmware 26Exynos 2500 Firmware 21Escargot 18Exynos 990 Firmware 17Smart Switch 16Exynos 2100 Firmware 15Exynos 9110 Firmware 14One 9Exynos Modem 5123 Firmware 9Exynos Modem 5300 Firmware 8Exynos Modem 5400 Firmware 8Notes 7Modem 5123 Firmware 7Rlottie 6Modem 5400 Firmware 6Magicinfo 9 Server 5Galaxy Store 5Account 4Health 4Members 4Assistant 3Modem 5300 Firmware 3Internet 2Motionphoto 2Walrus 2Exynos 9820 Firmware 1Exynos 8890 firmware 1
CVE-2026-47307
Alta · 7.5
CWE-476 19/05/2026
NULL Pointer Dereference em Samsung Walrus
NULL pointer dereference vulnerability in Samsung Open Source Walrus allows an attacker to cause a denial of service via a crafted WebAssembly module containing deeply nested instructions.
This issue affects Walrus: f339b8ee4ea701772e8ae640b3d1b12ac02b1ae9.
CVE-2026-21022
Média · 5.5
13/05/2026
Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release…
Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21021
Média · 6.8
13/05/2026
Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical…
Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity.
CVE-2026-21020
Alta · 7.8
13/05/2026
Improper export of android application components in OmaCP prior to SMR May-2026 Release…
Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers to trigger privileged functions.
CVE-2026-21018
Média · 6.7
CWE-787 13/05/2026
Out-of-bounds Write em Samsung Android
Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary code.
CVE-2026-21016
Média · 5.5
13/05/2026
Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows…
Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21015
Média · 5.5
CWE-276 13/05/2026
Incorrect Default Permissions em Samsung Android
Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local attacker to access unique identifier.
CVE-2026-21023
Média · 5.5
29/04/2026
Insufficient verification of data authenticity in PackageManagerService prior to SMR…
Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the installation restriction of specific application.
CVE-2026-6840
Média · 5.5
CWE-129 22/04/2026
Missing bounds validation for operator could allow out of range operator-code lookup…
Missing bounds validation for operator could allow out of range operator-code lookup during model loading
Affected version is prior to commit 1.30.0.
CVE-2026-6839
Média · 6.6
CWE-1284 22/04/2026
Improper validation of STRING tensor offsets could allows malformed string metadata to…
Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE
Affected version is prior to commit 1.30.0.
CVE-2026-41667
Média · 6.6
CWE-190 22/04/2026
Integer Overflow or Wraparound em Samsung One
Integer overflow in constant tensor data size calculation in Samsung Open Source ONE could cause incorrect buffer sizing for large constant nodes.
Affected version is prior to commit 1.30.0.
CVE-2026-41666
Média · 6.6
CWE-190 22/04/2026
Integer Overflow or Wraparound em Samsung One
Integer overflow in tensor copy size calculation in Samsung Open Source ONE could lead to out of bounds access during loop state propagation.
Affected version is prior to commit 1.30.0.
CVE-2026-41665
Média · 6.1
CWE-190 22/04/2026
Integer Overflow or Wraparound em Samsung One
Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause incorrect memory initialization for large intermediate tensors.
Affected version is prior to commit 1.30.0.
CVE-2026-41664
Média · 6.6
CWE-190 22/04/2026
Integer Overflow or Wraparound em Samsung One
Integer overflow in memory copy size calculation in Samsung Open Source ONE could lead to invalid memory operations with large tensor shapes.
Affected version is prior to commit 1.30.0.
CVE-2026-40450
Média · 6.6
CWE-190 22/04/2026
Integer Overflow or Wraparound em Samsung One
Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy length and memory corruption for oversized tensors.
Affected version is prior to commit 1.30.0.
CVE-2026-40449
Média · 6.6
CWE-190 22/04/2026
Integer Overflow or Wraparound em Samsung One
Integer overflow in buffer size calculation could result in out of bounds memory access when handling large tensors in Samsung Open Source ONE.
Affected version is prior to commit 1.30.0.
CVE-2026-40448
Média · 5.3
CWE-190 22/04/2026
Integer Overflow or Wraparound em Samsung One
Potential Integer overflow in tensor allocation size calculation could lead to insufficient memory allocation for large tensors in Samsung Open Source ONE.
Affected version is prior to commit 1.30.0.
CVE-2026-40447
Alta · 7.5
CWE-190 13/04/2026
Integer Overflow or Wraparound em Samsung Escargot
Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
CVE-2026-21014
Baixa · 2.8
13/04/2026
Improper access control in Samsung Camera prior to version 16.5.00.28 allows local…
Improper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to access location data. User interaction is required for triggering this vulnerability.
CVE-2026-21013
Média · 5.5
CWE-276 13/04/2026
Incorrect Default Permissions em Samsung Galaxy Wearable
Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive information.
CVE-2026-21012
Baixa · 3.3
13/04/2026
External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows…
External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged local attacker to create file with system privilege.
CVE-2026-21011
Média · 6.8
CWE-732 13/04/2026
Incorrect Permission Assignment for Critical Resource em Samsung Android
Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock.
CVE-2026-21010
Alta · 7.8
13/04/2026
Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local…
Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions.
CVE-2026-21009
Média · 6.8
CWE-754 13/04/2026
Improper Check for Unusual or Exceptional Conditions em Samsung Android
Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass App Pinning.
CVE-2026-21008
Média · 6.5
13/04/2026
Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows…
Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitive information.