Samsung Android vulnerabilities
502 known vulnerabilities affecting samsung/android.
Total CVEs
502
CISA KEV
12
actively exploited
Public exploits
1
Exploited in wild
12
Severity breakdown
CRITICAL11HIGH181MEDIUM243LOW67
Vulnerabilities
Page 13 of 26
CVE-2026-21098P4MEDIUMCVSS 6.1v14.0v14.0-smr-apr-2022-r1+93 more2026-09-09
CVE-2026-21098 [MEDIUM] CWE-284 CVE-2026-21098: Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to
Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction.
nvd
CVE-2025-20944P4HIGHCVSS 7.1v13.0v14.0+1 more2025-04-08
CVE-2025-20944 [HIGH] CWE-125 CVE-2025-20944: Out-of-bounds read in parsing audio data in libsavsac.so prior to SMR Apr-2025 Release 1 allows loca
Out-of-bounds read in parsing audio data in libsavsac.so prior to SMR Apr-2025 Release 1 allows local attackers to read out-of-bounds memory.
nvd
CVE-2026-21059P4HIGHCVSS 7.1v16.0v16.0-smr-apr-2026-r1+11 more2026-08-10
CVE-2026-21059 [HIGH] CWE-926 CVE-2026-21059: Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release
Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.
nvd
CVE-2024-20861P4MEDIUMCVSS 6.7v12.0v13.0+1 more2024-05-07
CVE-2024-20861 [MEDIUM] CWE-416 CVE-2024-20861: Use after free vulnerability in SveService prior to SMR May-2024 Release 1 allows local privileged a
Use after free vulnerability in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to cause memory corruption.
nvd
CVE-2025-20904P4MEDIUMCVSS 6.7v12.0v13.0+1 more2025-02-04
CVE-2025-20904 [MEDIUM] CWE-787 CVE-2025-20904: Out-of-bounds write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privileged att
Out-of-bounds write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privileged attackers to cause memory corruption.
nvd
CVE-2025-20987P4MEDIUMCVSS 6.7v13.0v14.0+1 more2025-06-04
CVE-2025-20987 [MEDIUM] CVE-2025-20987: Improper access control in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privile
Improper access control in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a auth_token.
nvd
CVE-2025-20885P4MEDIUMCVSS 6.7v12.0v13.0+1 more2025-02-04
CVE-2025-20885 [MEDIUM] CWE-787 CVE-2025-20885: Out-of-bounds write in softsim trustlet prior to SMR Jan-2025 Release 1 allows local privileged atta
Out-of-bounds write in softsim trustlet prior to SMR Jan-2025 Release 1 allows local privileged attackers to cause memory corruption.
nvd
CVE-2024-34589P4MEDIUMCVSS 6.5v12.0v13.0+1 more2024-07-02
CVE-2024-34589 [MEDIUM] CVE-2024-34589: Improper input validation in parsing RTCP RR packet in librtp.so prior to SMR Jul-2024 Release 1 all
Improper input validation in parsing RTCP RR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability.
nvd
CVE-2025-20908P4MEDIUMCVSS 6.5v14.0v15.02025-03-06
CVE-2025-20908 [MEDIUM] CVE-2025-20908: Use of insufficiently random values in Auracast prior to SMR Mar-2025 Release 1 allows adjacent atta
Use of insufficiently random values in Auracast prior to SMR Mar-2025 Release 1 allows adjacent attackers to access Auracast broadcasting.
nvd
CVE-2026-20978P4MEDIUMCVSS 6.1v13.0v14.0+2 more2026-02-04
CVE-2026-20978 [MEDIUM] CVE-2026-20978: Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local attackers to
Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local attackers to bypass the persistence configuration of the application.
nvd
CVE-2023-21456P4MEDIUMCVSS 5.5v11.0v12.0+1 more2023-03-16
CVE-2023-21456 [MEDIUM] CWE-22 CVE-2023-21456: Path traversal vulnerability in Galaxy Themes Service prior to SMR Mar-2023 Release 1 allows attacke
Path traversal vulnerability in Galaxy Themes Service prior to SMR Mar-2023 Release 1 allows attacker to access arbitrary file with system uid.
nvd
CVE-2024-20804P4MEDIUMCVSS 5.5v11.0v12.02024-01-04
CVE-2024-20804 [MEDIUM] CWE-22 CVE-2024-20804: Path traversal vulnerability in FileUriConverter of MyFiles prior to SMR Jan-2024 Release 1 in Andro
Path traversal vulnerability in FileUriConverter of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrary file.
nvd
CVE-2024-20805P4MEDIUMCVSS 5.5v11.0v12.02024-01-04
CVE-2024-20805 [MEDIUM] CWE-22 CVE-2024-20805: Path traversal vulnerability in ZipCompressor of MyFiles prior to SMR Jan-2024 Release 1 in Android
Path traversal vulnerability in ZipCompressor of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrary file.
nvd
CVE-2023-21479P4MEDIUMCVSS 5.3v13.02025-09-03
CVE-2023-21479 [MEDIUM] CVE-2023-21479: Improper authorization in Smart suggestions prior to SMR Apr-2023 Release 1 in Android 13 and 4.1.01
Improper authorization in Smart suggestions prior to SMR Apr-2023 Release 1 in Android 13 and 4.1.01.0 in Android 12 allows remote attackers to register a schedule.
nvd
CVE-2024-20820P4HIGHCVSS 7.1v11.0v12.0+1 more2024-02-06
CVE-2024-20820 [HIGH] CWE-125 CVE-2024-20820: Improper input validation in bootloader prior to SMR Feb-2024 Release 1 allows local privileged atta
Improper input validation in bootloader prior to SMR Feb-2024 Release 1 allows local privileged attackers to cause an Out-Of-Bounds read.
nvd
CVE-2024-34638P4HIGHCVSS 7.1v12.0v13.0+1 more2024-09-04
CVE-2024-34638 [HIGH] CWE-755 CVE-2024-34638: Improper handling of exceptional conditions in ThemeCenter prior to SMR Sep-2024 Release 1 allows lo
Improper handling of exceptional conditions in ThemeCenter prior to SMR Sep-2024 Release 1 allows local attackers to delete non-preloaded applications.
nvd
CVE-2023-21490P4HIGHCVSS 7.1v11.0v12.0+1 more2023-05-04
CVE-2023-21490 [HIGH] CWE-284 CVE-2023-21490: Improper access control in GearManagerStub prior to SMR May-2023 Release 1 allows a local attacker t
Improper access control in GearManagerStub prior to SMR May-2023 Release 1 allows a local attacker to delete applications installed by watchmanager.
nvd
CVE-2025-21032P4MEDIUMCVSS 6.8v14.0v15.02025-09-03
CVE-2025-21032 [MEDIUM] CVE-2025-21032: Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to
Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions.
nvd
CVE-2025-20993P4MEDIUMCVSS 6.8v13.0v14.0+1 more2025-06-04
CVE-2025-20993 [MEDIUM] CWE-787 CVE-2025-20993: Out-of-bounds write in libsecimaging.camera.samsung.so prior to SMR Jun-2025 Release 1 allows local
Out-of-bounds write in libsecimaging.camera.samsung.so prior to SMR Jun-2025 Release 1 allows local attackers to write out-of-bounds memory.
nvd
CVE-2024-20842P4MEDIUMCVSS 6.7v12.0v13.0+1 more2024-04-02
CVE-2024-20842 [MEDIUM] CWE-787 CVE-2024-20842: Improper Input Validation vulnerability in handling apdu of libsec-ril prior to SMR Apr-2024 Release
Improper Input Validation vulnerability in handling apdu of libsec-ril prior to SMR Apr-2024 Release 1 allows local privileged attackers to write out-of-bounds memory.
nvd