CVE Intelligence

Vulnerabilidades de Samsung

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Samsung: 293 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2026-20978 Média · 6.1 04/02/2026
Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local…
Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local attackers to bypass the persistence configuration of the application.
CVE-2026-20977 Média · 5.5 04/02/2026
Improper access control in Emergency Sharing prior to SMR Feb-2026 Release 1 allows…
Improper access control in Emergency Sharing prior to SMR Feb-2026 Release 1 allows local attackers to interrupt its functioning.
CVE-2025-59439 Alta · 7.5 CWE-400 03/02/2026
Uncontrolled Resource Consumption em Samsung Exynos 990 Firmware
An issue was discovered in Samsung Mobile Processor, Wearable Processor and Modem Exynos 980, 990, 850, 1080, 9110, W920, W930, W1000 and Modem 5123. Incorrect handling of NAS Registration messages leads to a Denial of Service because of Improper Handling of Exceptional Conditions.
CVE-2025-58348 Média · 5.5 CWE-770 03/02/2026
Allocation of Resources Without Limits or Throttling em Samsung Exynos 980 Firmware
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation via a large buffer in a /proc/driver/unifi0/confg_tspec write operation, leading to kernel memory exhaustion.
CVE-2025-58347 Média · 5.5 CWE-770 03/02/2026
Allocation of Resources Without Limits or Throttling em Samsung Exynos 980 Firmware
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation via a large buffer in a /proc/driver/unifi0/p2p_certif write operation, leading to kernel memory exhaustion.
CVE-2025-58346 Média · 5.5 CWE-770 03/02/2026
Allocation of Resources Without Limits or Throttling em Samsung Exynos 980 Firmware
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation via a large buffer in a /proc/driver/unifi0/send_addts write operation, leading to kernel memory exhaustion.
CVE-2025-58345 Média · 5.5 CWE-770 03/02/2026
Allocation of Resources Without Limits or Throttling em Samsung Exynos 980 Firmware
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation via a large buffer in a /proc/driver/unifi0/ap_certif_11ax_mode write operation, leading to kernel memory exhaustion.
CVE-2025-58344 Média · 6.2 CWE-770 03/02/2026
Allocation of Resources Without Limits or Throttling em Samsung Exynos 980 Firmware
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation in a /proc/driver/unifi0/conn_log_event_burst_to_us write operation, leading to kernel memory exhaustion.
CVE-2025-58343 Média · 5.5 CWE-770 03/02/2026
Allocation of Resources Without Limits or Throttling em Samsung Exynos 980 Firmware
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation via a large buffer in a /proc/driver/unifi0/create_tspec write operation, leading to kernel memory exhaustion.
CVE-2025-58342 Média · 6.2 CWE-770 03/02/2026
Allocation of Resources Without Limits or Throttling em Samsung Exynos 980 Firmware
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation via a large buffer in a /proc/driver/unifi0/uapsd write operation, leading to kernel memory exhaustion.
CVE-2025-58341 Média · 6.2 CWE-770 03/02/2026
Allocation of Resources Without Limits or Throttling em Samsung Exynos 980 Firmware
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation via a large buffer in a /proc/driver/unifi0/ap_cert_disable_ht_vht write operation, leading to kernel memory exhaustion.
CVE-2025-58340 Média · 6.2 CWE-770 03/02/2026
Allocation of Resources Without Limits or Throttling em Samsung Exynos 980 Firmware
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation via a large buffer in a /proc/driver/unifi0/send_delts write operation, leading to kernel memory exhaustion.
CVE-2026-25202 Crítica · 9.8 CWE-798 02/02/2026
Samsung MagicINFO 9 Server: credenciais de banco de dados embutidas no código
A conta e a senha do banco de dados estão embutidas no código (hardcoded), permitindo login com a conta para manipular o banco de dados no MagicInfo9 Server.Este problema afeta o MagicINFO 9 Server: versões anteriores à 21.1090.1.
CVE-2026-25201 Alta · 8.8 CWE-434 02/02/2026
Unrestricted Upload of File with Dangerous Type em Samsung Magicinfo 9 Server
An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server. This issue affects MagicINFO 9 Server: less than 21.1090.1.
CVE-2026-25200 Crítica · 9.8 CWE-434 02/02/2026
Unrestricted Upload of File with Dangerous Type em Samsung Magicinfo 9 Server
A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover This issue affects MagicINFO 9 Server: less than 21.1090.1.
CVE-2026-20976 Alta · 7.8 09/01/2026
Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker…
Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute arbitrary script.
CVE-2026-20975 Média · 5.5 09/01/2026
Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11…
Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local attackers to access specific files in arbitrary path.
CVE-2026-20974 Média · 4.6 09/01/2026
Improper input validation in data related to network restrictions prior to SMR Jan-2026…
Improper input validation in data related to network restrictions prior to SMR Jan-2026 Release 1 allows physical attackers to bypass Carrier Relock.
CVE-2026-20973 Crítica · 9.1 CWE-125 09/01/2026
Out-of-bounds Read em Samsung Android
Out-of-bounds read in libimagecodec.quram.so prior to SMR Jan-2026 Release 1 allows remote attacker to access out-of-bounds memory.
CVE-2026-20972 Baixa · 3.3 09/01/2026
Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026…
Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026 Release 1 allows local attackers to enable UWB.
CVE-2026-20971 Alta · 7.8 CWE-416 09/01/2026
Use After Free em Samsung Android
Use After Free in PROCA driver prior to SMR Jan-2026 Release 1 allows local attackers to potentially execute arbitrary code.
CVE-2026-20970 Alta · 7.8 09/01/2026
Improper access control in SLocation prior to SMR Jan-2026 Release 1 allows local…
Improper access control in SLocation prior to SMR Jan-2026 Release 1 allows local attackers to execute the privileged APIs.
CVE-2026-20969 Média · 5.5 09/01/2026
Improper input validation in SecSettings prior to SMR Jan-2026 Release 1 allows local…
Improper input validation in SecSettings prior to SMR Jan-2026 Release 1 allows local attacker to access file with system privilege. User interaction is required for triggering this vulnerability.
CVE-2026-20968 Média · 6.7 CWE-416 09/01/2026
Use After Free em Samsung Android
Use after free in DualDAR prior to SMR Jan-2026 Release 1 allows local privileged attackers to execute arbitrary code.
CVE-2025-53966 Alta · 8.4 CWE-120 05/01/2026
Classic Buffer Overflow em Samsung Exynos 1380 Firmware
An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow during handling of an IOCTL message.