Samsung Android vulnerabilities

CVE-2025-21048 [HIGH] CWE-22 CVE-2025-21048: Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to execute arbitrary code.

CVE-2025-21074 [HIGH] CWE-125 CVE-2025-21074: Out-of-bounds read in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers Out-of-bounds read in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory.

CVE-2025-58479 [HIGH] CWE-125 CVE-2025-58479: Out-of-bounds read in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers Out-of-bounds read in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.

CVE-2023-42567 [HIGH] CWE-787 CVE-2023-42567: Improper size check vulnerability in softsimd prior to SMR Dec-2023 Release 1 allows stack-based buf Improper size check vulnerability in softsimd prior to SMR Dec-2023 Release 1 allows stack-based buffer overflow.

CVE-2023-42535 [HIGH] CWE-787 CVE-2023-42535: Out-of-bounds Write in read_block of vold prior to SMR Nov-2023 Release 1 allows local attacker to e Out-of-bounds Write in read_block of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code.

CVE-2024-20813 [HIGH] CWE-787 CVE-2024-20813: Out-of-bounds Write in padmd_vld_qtbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local att Out-of-bounds Write in padmd_vld_qtbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code.

CVE-2024-20845 [HIGH] CWE-787 CVE-2024-20845: Out-of-bounds write vulnerability while releasing memory in libsavsac.so prior to SMR Apr-2024 Relea Out-of-bounds write vulnerability while releasing memory in libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code.

CVE-2023-30644 [HIGH] CWE-787 CVE-2023-30644: Stack out of bound write vulnerability in CdmaSmsParser of RILD prior to SMR Jul-2023 Release 1 allo Stack out of bound write vulnerability in CdmaSmsParser of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code.

CVE-2024-20844 [HIGH] CWE-787 CVE-2024-20844: Out-of-bounds write vulnerability while parsing remaining codewords in libsavsac.so prior to SMR Apr Out-of-bounds write vulnerability while parsing remaining codewords in libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code.

CVE-2024-20812 [HIGH] CWE-787 CVE-2024-20812: Out-of-bounds Write in padmd_vld_htbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local att Out-of-bounds Write in padmd_vld_htbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code.

CVE-2024-20846 [HIGH] CWE-787 CVE-2024-20846: Out-of-bounds write vulnerability while decoding hcr of libsavsac.so prior to SMR Apr-2024 Release 1 Out-of-bounds write vulnerability while decoding hcr of libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code.

CVE-2023-30680 [HIGH] CWE-269 CVE-2023-30680: Improper privilege management vulnerability in MMIGroup prior to SMR Aug-2023 Release 1 allows code Improper privilege management vulnerability in MMIGroup prior to SMR Aug-2023 Release 1 allows code execution with privilege.

CVE-2025-20936 [HIGH] CVE-2025-20936: Improper access control in HDCP trustlet prior to SMR Apr-2025 Release 1 allows local attackers with Improper access control in HDCP trustlet prior to SMR Apr-2025 Release 1 allows local attackers with shell privilege to escalate their privileges to root.

CVE-2026-20979 [HIGH] CVE-2026-20979: Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Settings privilege.

CVE-2026-20970 [HIGH] CVE-2026-20970: Improper access control in SLocation prior to SMR Jan-2026 Release 1 allows local attackers to execu Improper access control in SLocation prior to SMR Jan-2026 Release 1 allows local attackers to execute the privileged APIs.

CVE-2025-21034 [HIGH] CWE-787 CVE-2025-21034: Out-of-bounds write in libsavsvc.so prior to SMR Sep-2025 Release 1 allows local attackers to potent Out-of-bounds write in libsavsvc.so prior to SMR Sep-2025 Release 1 allows local attackers to potentially execute arbitrary code.

CVE-2025-21053 [HIGH] CWE-787 CVE-2025-21053: Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Rele Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.

CVE-2025-21052 [HIGH] CWE-787 CVE-2025-21052: Out-of-bounds write under specific condition in the pre-processing of JPEG decoding in libpadm.so pr Out-of-bounds write under specific condition in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.

CVE-2025-21051 [HIGH] CWE-787 CVE-2025-21051: Out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Relea Out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2023-30727 [HIGH] CVE-2023-30727: Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attacker Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi and connect arbitrary Wi-Fi without User Interaction.