Samsung Mobile Samsung Mobile Devices

• CVE-2025-21043 High 8.8 Exploited Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code. 2.2%
• CVE-2025-21042 High 8.8 Exploited Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code. 35.6%
• CVE-2023-21492 Medium 4.4 Exploited Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR. 2.6%
• CVE-2022-22265 Medium 5.0 Exploited An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution. 0.4%
• CVE-2021-25489 Low 3.3 Exploited Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic. 0.5%
• CVE-2021-25487 High 7.3 Exploited Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid f 0.6%
• CVE-2021-25394 Medium 6.4 Exploited A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised. 0.4%
• CVE-2021-25395 Medium 6.4 Exploited A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised. 0.4%
• CVE-2021-25372 Medium 6.1 Exploited An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access. 0.8%
• CVE-2021-25371 Medium 6.1 Exploited A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP. 0.8%
• CVE-2021-25370 Medium 6.1 Exploited An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic. 0.9%
• CVE-2021-25369 Medium 6.2 Exploited An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace. 1.1%
• CVE-2021-25337 Medium 4.4 Exploited Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files. 2.8%
• CVE-2026-21126 Medium 6.9 Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory. 0.1%
• CVE-2026-21125 High 8.6 Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code. 0.1%
• CVE-2026-21124 High 8.6 Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code. 0.1%
• CVE-2026-21123 Medium 6.7 Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before first unlock. 0.1%
• CVE-2026-21122 High 7.0 Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code. 0.1%
• CVE-2026-21121 Medium 6.9 Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs. 0.1%
• CVE-2026-21120 High 8.9 Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege. 0.1%
• CVE-2026-21119 Medium 4.8 Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory. 0.1%
• CVE-2026-21118 Medium 6.9 Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage. <0.1%
• CVE-2026-21117 Medium 5.1 Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information. 0.1%
• CVE-2026-21116 Medium 5.1 Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory. 0.1%
• CVE-2026-21115 Medium 5.1 Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory. 0.1%
• CVE-2026-21114 High 7.0 Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code. 0.1%
• CVE-2026-21140 Medium 6.9 Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications. 0.1%
• CVE-2026-21104 High 7.1 Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code. 0.1%
• CVE-2026-21103 Medium 6.8 Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege. 0.2%
• CVE-2026-21102 Critical 9.3 Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege. 0.2%
• CVE-2026-21101 High 8.4 Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege. 0.2%
• CVE-2026-21100 Medium 6.9 Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity. 0.1%
• CVE-2026-21099 Medium 5.1 Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information. 0.1%
• CVE-2026-21098 Medium 6.9 Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction. <0.1%
• CVE-2026-21097 Medium 4.6 Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity. 0.2%
• CVE-2026-21096 Critical 9.2 Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code. 0.8%
• CVE-2026-21095 Critical 9.2 Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code. 0.8%
• CVE-2026-21094 Medium 6.1 Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory. 0.3%
• CVE-2026-21093 Medium 5.6 Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory. 0.1%
• CVE-2026-21092 High 8.8 Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege. 0.5%
• CVE-2026-21091 Medium 4.4 Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory. 0.2%
• CVE-2026-21090 Medium 4.4 Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory. 0.2%
• CVE-2026-21089 Medium 6.9 Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory. 0.2%
• CVE-2026-21088 Medium 6.9 Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory. 0.2%
• CVE-2026-21087 High 8.6 Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege. 0.2%
• CVE-2026-21086 Medium 4.8 Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to access proxy configuration. 0.1%
• CVE-2026-21085 High 8.4 Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory. 0.2%
• CVE-2026-21073 Medium 5.2 Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity. 0.2%
• CVE-2026-21072 Medium 5.1 Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory. 0.2%
• CVE-2026-21071 Medium 5.1 Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory. 0.2%