Vulnerabilidades de Samsung

CVE-2026-21007 Média · 6.8 CWE-754 13/04/2026

Improper Check for Unusual or Exceptional Conditions em Samsung Android

Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Knox Guard.

CVE-2026-21006 Baixa · 2.4 13/04/2026

Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical…

Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents.

CVE-2026-40446 Crítica · 9.8 CWE-843 13/04/2026

Type Confusion em Samsung Escargot

Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.

CVE-2026-25209 Crítica · 9.1 CWE-125 13/04/2026

Out-of-bounds Read em Samsung Escargot

Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.

CVE-2026-25208 Crítica · 9.8 CWE-190 13/04/2026

Integer Overflow or Wraparound em Samsung Escargot

Integer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.

CVE-2026-25207 Crítica · 9.8 CWE-787 13/04/2026

Out-of-bounds Write em Samsung Escargot

Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.

CVE-2026-25206 Crítica · 9.1 CWE-125 13/04/2026

Out-of-bounds Read em Samsung Escargot

Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.

CVE-2026-25205 Crítica · 9.8 CWE-122 13/04/2026

Heap-based Buffer Overflow em Samsung Escargot

Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows out-of-bounds write.This issue affects Escargot:commit hash 97e8115ab1110bc502b4b5e4a0c689a71520d335 .

CVE-2026-21003 Média · 6.8 13/04/2026

Improper input validation in data related to network restrictions prior to SMR Apr-2026…

Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the restrictions.

CVE-2026-25204 Alta · 7.5 CWE-502 12/04/2026

Deserialization of Untrusted Data em Samsung Escargot

Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service condition via process abort. This issue affects escarogt prior to commit hash 97e8115ab1110bc502b4b5e4a0c689a71520d335

CVE-2025-52908 Crítica · 9.8 CWE-120 07/04/2026

Classic Buffer Overflow em Samsung Exynos W1000 Firmware

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow via a certain ioctl message, issue 1 of 2.

CVE-2025-62818 Crítica · 9.8 CWE-787 07/04/2026

Out-of-bounds Write em Samsung Exynos 990 Firmware

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. An out-of-bounds write occurs due to a mismatch between the TP-UDHI and UDL values when processing an SMS TP-UD packet.

CVE-2025-52909 Crítica · 9.8 CWE-120 07/04/2026

Classic Buffer Overflow em Samsung Exynos W1000 Firmware

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow via a certain ioctl message, issue 2 of 2.

CVE-2025-54601 Alta · 7.0 CWE-362 06/04/2026

Race Condition em Samsung Exynos 980 Firmware

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor amd Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a double free. An attacker can trigger a race condition by invoking an ioctl function concurrently from multiple threads.

CVE-2025-57834 Alta · 7.5 CWE-20 06/04/2026

Improper Input Validation em Samsung Exynos 980 Firmware

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem (Exynos 980, 850, 990, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400, and Modem 5410). The absence of proper input validation leads to a Denial of Service.

CVE-2025-54602 Alta · 7.0 CWE-362 06/04/2026

Race Condition em Samsung Exynos 980 Firmware

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a use-after-free. An attacker can trigger a race condition by invoking an ioctl function concurrently from multiple threads.

CVE-2025-54328 Crítica · 10.0 CWE-121 06/04/2026

Stack-based Buffer Overflow em Samsung Exynos 980 Firmware

An issue was discovered in SMS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. A Stack-based Buffer Overflow occurs while parsing SMS RP-DATA messages.

CVE-2025-58349 Crítica · 9.1 CWE-400 06/04/2026

Uncontrolled Resource Consumption em Samsung Exynos 990 Firmware

An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Incorrect handling of LTE MAC packets containing many MAC Control Elements (CEs) leads to baseband crashes.

CVE-2025-54324 Alta · 7.5 CWE-400 06/04/2026

Uncontrolled Resource Consumption em Samsung Exynos 990 Firmware

An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Incorrect Handling of a DL NAS Transport packet leads to a Denial of Service.

CVE-2025-59440 Alta · 7.5 CWE-400 06/04/2026

Uncontrolled Resource Consumption em Samsung Exynos 990 Firmware

An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper handling of SIM card proactive commands leads to a Denial of Service.

CVE-2025-57835 Alta · 7.5 CWE-20 06/04/2026

Improper Input Validation em Samsung Exynos 990 Firmware

An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper memory initialization results in an illegal memory access, causing a system crash via a malformed RRCReconfiguration message.

CVE-2026-21005 Média · 6.5 CWE-22 16/03/2026

Path Traversal em Samsung Smart Switch

Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege.

CVE-2026-21004 Média · 6.5 CWE-287 16/03/2026

Improper Authentication em Samsung Smart Switch

Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service.

CVE-2026-21002 Média · 5.5 CWE-347 16/03/2026

Improper Verification of Cryptographic Signature em Samsung Galaxy Store

Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to install arbitrary application.

CVE-2026-21001 Média · 5.5 CWE-22 16/03/2026

Path Traversal em Samsung Galaxy Store

Path traversal in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privilege.