Vulnerabilidades de Samsung
CVEs publicadas que afetam produtos de Samsung: 293 registro(s), com severidade, exploração e correções.
Android 114Exynos 1380 Firmware 49Exynos 1480 Firmware 45Exynos 1330 Firmware 43Exynos 1280 Firmware 43Exynos 1580 Firmware 42Exynos 850 Firmware 36Exynos 980 Firmware 32Exynos W930 Firmware 31Exynos W920 Firmware 31Exynos 2400 Firmware 31Exynos 1080 Firmware 29Exynos W1000 Firmware 28Exynos 2200 Firmware 26Exynos 2500 Firmware 21Escargot 18Exynos 990 Firmware 17Smart Switch 16Exynos 2100 Firmware 15Exynos 9110 Firmware 14One 9Exynos Modem 5123 Firmware 9Exynos Modem 5300 Firmware 8Exynos Modem 5400 Firmware 8Notes 7Modem 5123 Firmware 7Rlottie 6Modem 5400 Firmware 6Magicinfo 9 Server 5Galaxy Store 5Account 4Health 4Members 4Assistant 3Modem 5300 Firmware 3Internet 2Motionphoto 2Walrus 2Exynos 9820 Firmware 1Exynos 8890 firmware 1
CVE-2026-20978
Média · 6.1
04/02/2026
Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local…
Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local attackers to bypass the persistence configuration of the application.
CVE-2026-20977
Média · 5.5
04/02/2026
Improper access control in Emergency Sharing prior to SMR Feb-2026 Release 1 allows…
Improper access control in Emergency Sharing prior to SMR Feb-2026 Release 1 allows local attackers to interrupt its functioning.
CVE-2025-59439
Alta · 7.5
CWE-400 03/02/2026
Uncontrolled Resource Consumption em Samsung Exynos 990 Firmware
An issue was discovered in Samsung Mobile Processor, Wearable Processor and Modem Exynos 980, 990, 850, 1080, 9110, W920, W930, W1000 and Modem 5123. Incorrect handling of NAS Registration messages leads to a Denial of Service because of Improper Handling of Exceptional Conditions.
CVE-2025-58348
Média · 5.5
CWE-770 03/02/2026
Allocation of Resources Without Limits or Throttling em Samsung Exynos 980 Firmware
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation via a large buffer in a /proc/driver/unifi0/confg_tspec write operation, leading to kernel memory exhaustion.
CVE-2025-58347
Média · 5.5
CWE-770 03/02/2026
Allocation of Resources Without Limits or Throttling em Samsung Exynos 980 Firmware
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation via a large buffer in a /proc/driver/unifi0/p2p_certif write operation, leading to kernel memory exhaustion.
CVE-2025-58346
Média · 5.5
CWE-770 03/02/2026
Allocation of Resources Without Limits or Throttling em Samsung Exynos 980 Firmware
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation via a large buffer in a /proc/driver/unifi0/send_addts write operation, leading to kernel memory exhaustion.
CVE-2025-58345
Média · 5.5
CWE-770 03/02/2026
Allocation of Resources Without Limits or Throttling em Samsung Exynos 980 Firmware
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation via a large buffer in a /proc/driver/unifi0/ap_certif_11ax_mode write operation, leading to kernel memory exhaustion.
CVE-2025-58344
Média · 6.2
CWE-770 03/02/2026
Allocation of Resources Without Limits or Throttling em Samsung Exynos 980 Firmware
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation in a /proc/driver/unifi0/conn_log_event_burst_to_us write operation, leading to kernel memory exhaustion.
CVE-2025-58343
Média · 5.5
CWE-770 03/02/2026
Allocation of Resources Without Limits or Throttling em Samsung Exynos 980 Firmware
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation via a large buffer in a /proc/driver/unifi0/create_tspec write operation, leading to kernel memory exhaustion.
CVE-2025-58342
Média · 6.2
CWE-770 03/02/2026
Allocation of Resources Without Limits or Throttling em Samsung Exynos 980 Firmware
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation via a large buffer in a /proc/driver/unifi0/uapsd write operation, leading to kernel memory exhaustion.
CVE-2025-58341
Média · 6.2
CWE-770 03/02/2026
Allocation of Resources Without Limits or Throttling em Samsung Exynos 980 Firmware
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation via a large buffer in a /proc/driver/unifi0/ap_cert_disable_ht_vht write operation, leading to kernel memory exhaustion.
CVE-2025-58340
Média · 6.2
CWE-770 03/02/2026
Allocation of Resources Without Limits or Throttling em Samsung Exynos 980 Firmware
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation via a large buffer in a /proc/driver/unifi0/send_delts write operation, leading to kernel memory exhaustion.
CVE-2026-25202
Crítica · 9.8
CWE-798 02/02/2026
Samsung MagicINFO 9 Server: credenciais de banco de dados embutidas no código
A conta e a senha do banco de dados estão embutidas no código (hardcoded), permitindo login com a conta para manipular o banco de dados no MagicInfo9 Server.Este problema afeta o MagicINFO 9 Server: versões anteriores à 21.1090.1.
CVE-2026-25201
Alta · 8.8
CWE-434 02/02/2026
Unrestricted Upload of File with Dangerous Type em Samsung Magicinfo 9 Server
An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server.
This issue affects MagicINFO 9 Server: less than 21.1090.1.
CVE-2026-25200
Crítica · 9.8
CWE-434 02/02/2026
Unrestricted Upload of File with Dangerous Type em Samsung Magicinfo 9 Server
A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover
This issue affects MagicINFO 9 Server: less than 21.1090.1.
CVE-2026-20976
Alta · 7.8
09/01/2026
Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker…
Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute arbitrary script.
CVE-2026-20975
Média · 5.5
09/01/2026
Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11…
Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local attackers to access specific files in arbitrary path.
CVE-2026-20974
Média · 4.6
09/01/2026
Improper input validation in data related to network restrictions prior to SMR Jan-2026…
Improper input validation in data related to network restrictions prior to SMR Jan-2026 Release 1 allows physical attackers to bypass Carrier Relock.
CVE-2026-20973
Crítica · 9.1
CWE-125 09/01/2026
Out-of-bounds Read em Samsung Android
Out-of-bounds read in libimagecodec.quram.so prior to SMR Jan-2026 Release 1 allows remote attacker to access out-of-bounds memory.
CVE-2026-20972
Baixa · 3.3
09/01/2026
Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026…
Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026 Release 1 allows local attackers to enable UWB.
CVE-2026-20971
Alta · 7.8
CWE-416 09/01/2026
Use After Free em Samsung Android
Use After Free in PROCA driver prior to SMR Jan-2026 Release 1 allows local attackers to potentially execute arbitrary code.
CVE-2026-20970
Alta · 7.8
09/01/2026
Improper access control in SLocation prior to SMR Jan-2026 Release 1 allows local…
Improper access control in SLocation prior to SMR Jan-2026 Release 1 allows local attackers to execute the privileged APIs.
CVE-2026-20969
Média · 5.5
09/01/2026
Improper input validation in SecSettings prior to SMR Jan-2026 Release 1 allows local…
Improper input validation in SecSettings prior to SMR Jan-2026 Release 1 allows local attacker to access file with system privilege. User interaction is required for triggering this vulnerability.
CVE-2026-20968
Média · 6.7
CWE-416 09/01/2026
Use After Free em Samsung Android
Use after free in DualDAR prior to SMR Jan-2026 Release 1 allows local privileged attackers to execute arbitrary code.
CVE-2025-53966
Alta · 8.4
CWE-120 05/01/2026
Classic Buffer Overflow em Samsung Exynos 1380 Firmware
An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow during handling of an IOCTL message.