Samsung Mobile Samsung Mobile Devices

• CVE-2026-21070 Medium 5.1 Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information. 0.2%
• CVE-2026-21069 Medium 5.1 Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory. 0.2%
• CVE-2026-21068 High 8.4 Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code. 0.2%
• CVE-2026-21067 Medium 5.1 Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory. 0.2%
• CVE-2026-21066 Medium 5.1 Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory. 0.2%
• CVE-2026-21065 Medium 4.4 Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory. 0.2%
• CVE-2026-21064 High 7.0 Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability. 0.1%
• CVE-2026-21063 Medium 6.8 Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function. 0.2%
• CVE-2026-21062 Medium 4.8 Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data. 0.1%
• CVE-2026-21061 Medium 6.0 Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction is required for triggering this vulnerability. 0.4%
• CVE-2026-21060 Medium 6.7 Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles. 0.2%
• CVE-2026-21059 Medium 6.9 Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege. 0.1%
• CVE-2026-21058 Medium 6.9 Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege. 0.1%
• CVE-2026-21047 High 8.3 Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to potentially execute arbitrary code. 0.7%
• CVE-2026-21052 Medium 6.8 Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system privilege. 0.2%
• CVE-2026-21051 Medium 5.1 Incorrect default permissions in WLAN security prior to SMR Jul-2026 Release 1 allows local attackers to configure TencentWifiSecurity settings. 0.2%
• CVE-2026-21050 Medium 5.1 Improper access control in SmartThingsKit prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information. 0.2%
• CVE-2026-21049 High 8.4 Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary code. 0.2%
• CVE-2026-21048 High 8.4 Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory. 0.5%
• CVE-2026-21046 High 8.4 Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR Jul-2026 Release 1 allows local privileged attackers to execute arbitrary code. 0.1%
• CVE-2026-21045 High 8.4 Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory. 0.5%
• CVE-2026-21044 Medium 5.8 Improper authorization in KnoxGuardManager prior to SMR Jul-2026 Release 1 allows local attackers to bypass the persistence configuration of the application. 0.1%
• CVE-2026-21043 Medium 6.7 Path traversal in Wallpaper service prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system server privilege. 0.2%
• CVE-2026-21042 High 8.7 Out-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows remote attackers to execute arbitrary code. 0.6%
• CVE-2026-21041 Medium 6.9 Improper access control in SamsungSEAgentService prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information. 0.2%
• CVE-2026-21040 Medium 6.9 Improper access control in IAFDService prior to SMR Jul-2026 Release 1 allows local privileged attackers to use the privileged APIs. 0.1%
• CVE-2026-21039 Medium 6.9 Improper access control in Settings prior to SMR Jul-2026 Release 1 allows local attackers to configure Theft protection settings. 0.2%
• CVE-2026-21031 Medium 5.2 Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. User interaction is required for triggering this vulnerability. <0.1%
• CVE-2026-21030 Medium 6.4 Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger privileged functions. <0.1%
• CVE-2026-21029 Medium 6.8 Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 allows local attacker to execute privileged operations. <0.1%
• CVE-2026-21028 Medium 5.1 Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information. <0.1%
• CVE-2026-21027 Medium 4.8 Improper export of android application components in ImsSettings prior to SMR Jun-2026 Release 1 allows local attackers to trigger logging function. <0.1%
• CVE-2026-21026 Medium 6.4 Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attackers to access to sensitive information. <0.1%
• CVE-2026-21025 Medium 6.9 Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information. <0.1%
• CVE-2026-21017 Medium 4.6 Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attackers to access privileged files. <0.1%
• CVE-2026-21022 Medium 6.9 Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release 1 allows local attackers to access sensitive information. <0.1%
• CVE-2026-21021 Medium 5.1 Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity. 0.2%
• CVE-2026-21020 Medium 5.1 Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers to trigger privileged functions. <0.1%
• CVE-2026-21019 High 8.9 Improper input validation in FacAtFunction in Galaxy Watch prior to SMR May-2026 Release 1 allows local attacker to execute arbitrary code with system privilege. 0.2%
• CVE-2026-21018 Medium 6.8 Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary code. 0.2%
• CVE-2026-21016 Medium 5.1 Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows local attackers to access sensitive information. <0.1%
• CVE-2026-21015 Medium 6.8 Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local attacker to access unique identifier. <0.1%
• CVE-2026-21023 Medium 6.9 Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the installation restriction of specific application. 0.1%
• CVE-2026-21010 Medium 6.6 Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions. 0.1%
• CVE-2026-21008 Medium 5.1 Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitive information. 0.2%
• CVE-2026-21012 Medium 6.8 External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged local attacker to create file with system privilege. <0.1%
• CVE-2026-21011 Medium 5.4 Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock. 0.1%
• CVE-2026-21009 Medium 4.1 Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass App Pinning. 0.2%
• CVE-2026-21007 Medium 4.4 Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Knox Guard. 0.2%
• CVE-2026-21006 Medium 4.7 Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents. 0.1%