Samsung Android vulnerabilities

CVE-2025-20992 [HIGH] CWE-125 CVE-2025-20992: Out-of-bound read in libsecimaging.camera.samsung.so prior to SMR Feb-2025 Release 1 allows local at Out-of-bound read in libsecimaging.camera.samsung.so prior to SMR Feb-2025 Release 1 allows local attackers to read out-of-bounds memory.

CVE-2023-21474 [HIGH] CVE-2023-21474: Intent redirection vulnerability in SecSettings prior to SMR Apr-2022 Release 1 allows attackers to Intent redirection vulnerability in SecSettings prior to SMR Apr-2022 Release 1 allows attackers to access arbitrary file with system privilege.

CVE-2026-21018 [MEDIUM] CWE-787 CVE-2026-21018: Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary code.

CVE-2024-34676 [HIGH] CWE-787 CVE-2024-34676: Out-of-bounds write in parsing subtitle file in libsubextractor.so prior to SMR Nov-2024 Release 1 a Out-of-bounds write in parsing subtitle file in libsubextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption. User interaction is required for triggering this vulnerability.

CVE-2025-20903 [HIGH] CVE-2025-20903: Improper access control in SecSettingsIntelligence prior to SMR Mar-2025 Release 1 allows local atta Improper access control in SecSettingsIntelligence prior to SMR Mar-2025 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability.

CVE-2026-21100 [HIGH] CWE-284 CVE-2026-21100: Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity.

CVE-2024-34587 [MEDIUM] CVE-2024-34587: Improper input validation in parsing application information from RTCP packet in librtp.so prior to Improper input validation in parsing application information from RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.

CVE-2024-20865 [MEDIUM] CVE-2024-20865: Authentication bypass in bootloader prior to SMR May-2024 Release 1 allows physical attackers to fla Authentication bypass in bootloader prior to SMR May-2024 Release 1 allows physical attackers to flash arbitrary images.

CVE-2026-20980 [MEDIUM] CVE-2026-20980: Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker to execut Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker to execute arbitrary commands.

CVE-2026-21102 [MEDIUM] CWE-416 CVE-2026-21102: Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execu Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.

CVE-2026-20981 [MEDIUM] CVE-2026-20981: Improper input validation in FacAtFunction prior to SMR Feb-2026 Release 1 allows privileged physica Improper input validation in FacAtFunction prior to SMR Feb-2026 Release 1 allows privileged physical attacker to execute arbitrary command with system privilege.

CVE-2026-20982 [MEDIUM] CWE-22 CVE-2026-20982: Path traversal in ShortcutService prior to SMR Feb-2026 Release 1 allows privileged local attacker t Path traversal in ShortcutService prior to SMR Feb-2026 Release 1 allows privileged local attacker to create file with system privilege.

CVE-2026-20968 [MEDIUM] CWE-416 CVE-2026-20968: Use after free in DualDAR prior to SMR Jan-2026 Release 1 allows local privileged attackers to execu Use after free in DualDAR prior to SMR Jan-2026 Release 1 allows local privileged attackers to execute arbitrary code.

CVE-2026-21093 [MEDIUM] CWE-121 CVE-2026-21093: Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privilege Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.

CVE-2026-21092 [MEDIUM] CWE-35 CVE-2026-21092: Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege.

CVE-2025-21080 [HIGH] CVE-2025-21080: Improper export of android application components in Dynamic Lockscreen prior to SMR Dec-2025 Releas Improper export of android application components in Dynamic Lockscreen prior to SMR Dec-2025 Release 1 allows local attackers to access files with Dynamic Lockscreen's privilege.

CVE-2024-20862 [MEDIUM] CWE-787 CVE-2024-20862: Out-of-bounds write in SveService prior to SMR May-2024 Release 1 allows local privileged attackers Out-of-bounds write in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code.

CVE-2026-21097 [MEDIUM] CWE-285 CVE-2026-21097: Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local p Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity.

CVE-2026-21101 [MEDIUM] CWE-20 CVE-2026-21101: Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege.

CVE-2026-21103 [MEDIUM] CWE-35 CVE-2026-21103: Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to acc Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.