Samsung Android vulnerabilities

CVE-2024-34588 [MEDIUM] CVE-2024-34588: Improper input validation혻in parsing RTCP SR packet in librtp.so prior to SMR Jul-2024 Release 1 all Improper input validation혻in parsing RTCP SR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability.

CVE-2026-21063 [MEDIUM] CWE-926 CVE-2026-21063: Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function.

CVE-2026-21112 [MEDIUM] CWE-20 CVE-2026-21112: Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbit Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability.

CVE-2023-21513 [MEDIUM] CWE-269 CVE-2023-21513: Improper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows physic Improper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows physical attackers to manipulate device to operate in way that results in unexpected behavior in CC Mode under specific condition.

CVE-2023-21473 [MEDIUM] CWE-20 CVE-2023-21473: Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader.

CVE-2023-21472 [MEDIUM] CWE-20 CVE-2023-21472: Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader.

CVE-2025-21047 [MEDIUM] CVE-2025-21047: Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to us Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs.

CVE-2023-30709 [MEDIUM] CVE-2023-30709: Improper access control in Dual Messenger prior to SMR Sep-2023 Release 1 allows local attackers lau Improper access control in Dual Messenger prior to SMR Sep-2023 Release 1 allows local attackers launch activity with system privilege.

CVE-2023-21427 [MEDIUM] CWE-284 CVE-2023-21427: Improper access control vulnerability in NfcTile prior to SMR Jan-2023 Release 1 allows to attacker Improper access control vulnerability in NfcTile prior to SMR Jan-2023 Release 1 allows to attacker to use NFC without user recognition.

CVE-2024-20833 [MEDIUM] CWE-416 CVE-2024-20833: Use after free vulnerability in pub_crypto_recv_msg prior to SMR Mar-2024 Release 1 due to race cond Use after free vulnerability in pub_crypto_recv_msg prior to SMR Mar-2024 Release 1 due to race condition allows local attackers with system privilege to cause memory corruption.

CVE-2025-20952 [MEDIUM] CVE-2025-20952: Improper access control in Mdecservice prior to SMR Apr-2025 Release 1 allows local attackers to acc Improper access control in Mdecservice prior to SMR Apr-2025 Release 1 allows local attackers to access arbitrary files with system privilege.

CVE-2024-34655 [MEDIUM] CVE-2024-34655: Incorrect use of privileged API in UniversalCredentialManager prior to SMR Sep-2024 Release 1 allows Incorrect use of privileged API in UniversalCredentialManager prior to SMR Sep-2024 Release 1 allows local attackers to access privileged API related to UniversalCredentialManager.

CVE-2024-20875 [MEDIUM] CVE-2024-20875: Improper caller verification vulnerability in SemClipboard prior to SMR June-2024 Release 1 allows l Improper caller verification vulnerability in SemClipboard prior to SMR June-2024 Release 1 allows local attackers to access arbitrary files.

CVE-2023-30720 [MEDIUM] CVE-2023-30720: PendingIntent hijacking in LmsAssemblyTrackerCTC prior to SMR Sep-2023 Release 1 allows local attack PendingIntent hijacking in LmsAssemblyTrackerCTC prior to SMR Sep-2023 Release 1 allows local attacker to gain arbitrary file access.

CVE-2026-21015 [MEDIUM] CWE-276 CVE-2026-21015: Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local attacker Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local attacker to access unique identifier.

CVE-2023-30706 [MEDIUM] CVE-2023-30706: Improper authorization in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows attacker to read a Improper authorization in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows attacker to read arbitrary file with system privilege.

CVE-2025-20981 [MEDIUM] CVE-2025-20981: Improper access control in AudioService prior to SMR Jun-2025 Release 1 allows local attackers to ac Improper access control in AudioService prior to SMR Jun-2025 Release 1 allows local attackers to access sensitive information.

CVE-2024-20873 [MEDIUM] CWE-787 CVE-2024-20873: Improper input validation vulnerability in caminfo driver prior to SMR Jun-2024 Release 1 allows loc Improper input validation vulnerability in caminfo driver prior to SMR Jun-2024 Release 1 allows local privileged attackers to write out-of-bounds memory.

CVE-2026-20969 [MEDIUM] CVE-2026-20969: Improper input validation in SecSettings prior to SMR Jan-2026 Release 1 allows local attacker to ac Improper input validation in SecSettings prior to SMR Jan-2026 Release 1 allows local attacker to access file with system privilege. User interaction is required for triggering this vulnerability.

CVE-2023-42534 [MEDIUM] CWE-552 CVE-2023-42534: Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows lo Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to read arbitrary files with system privilege.