Samsung Android vulnerabilities

CVE-2026-21068 [HIGH] CWE-121 CVE-2026-21068: Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code.

CVE-2023-21475 [HIGH] CWE-787 CVE-2023-21475: Out-of-bounds Write vulnerability in libaudiosaplus_sec.so library prior to SMR Apr-2023 Release 1 a Out-of-bounds Write vulnerability in libaudiosaplus_sec.so library prior to SMR Apr-2023 Release 1 allows local attacker to execute arbitrary code.

CVE-2023-21476 [HIGH] CWE-787 CVE-2023-21476: Out-of-bounds Write vulnerability in libaudiosaplus_sec.so library prior to SMR Apr-2023 Release 1 a Out-of-bounds Write vulnerability in libaudiosaplus_sec.so library prior to SMR Apr-2023 Release 1 allows local attacker to execute arbitrary code.

CVE-2026-21071 [HIGH] CWE-20 CVE-2026-21071: Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows loca Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21072 [HIGH] CWE-20 CVE-2026-21072: Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21066 [HIGH] CWE-20 CVE-2026-21066: Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local a Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21067 [HIGH] CVE-2026-21067: Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to wr Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21090 [HIGH] CWE-787 CVE-2026-21090: Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21091 [HIGH] CWE-787 CVE-2026-21091: Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21065 [HIGH] CWE-20 CVE-2026-21065: Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attacker Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2025-21055 [HIGH] CWE-125 CVE-2025-21055: Out-of-bounds read and write in libimagecodec.quram.so prior to SMR Oct-2025 Release 1 allows remote Out-of-bounds read and write in libimagecodec.quram.so prior to SMR Oct-2025 Release 1 allows remote attackers to access out-of-bounds memory.

CVE-2023-42567 [HIGH] CWE-787 CVE-2023-42567: Improper size check vulnerability in softsimd prior to SMR Dec-2023 Release 1 allows stack-based buf Improper size check vulnerability in softsimd prior to SMR Dec-2023 Release 1 allows stack-based buffer overflow.

CVE-2023-42535 [HIGH] CWE-787 CVE-2023-42535: Out-of-bounds Write in read_block of vold prior to SMR Nov-2023 Release 1 allows local attacker to e Out-of-bounds Write in read_block of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code.

CVE-2024-20813 [HIGH] CWE-787 CVE-2024-20813: Out-of-bounds Write in padmd_vld_qtbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local att Out-of-bounds Write in padmd_vld_qtbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code.

CVE-2024-20845 [HIGH] CWE-787 CVE-2024-20845: Out-of-bounds write vulnerability while releasing memory in libsavsac.so prior to SMR Apr-2024 Relea Out-of-bounds write vulnerability while releasing memory in libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code.

CVE-2023-21420 [HIGH] CWE-134 CVE-2023-21420: Use of Externally-Controlled Format String vulnerabilities in STST TA prior to SMR Jan-2023 Release Use of Externally-Controlled Format String vulnerabilities in STST TA prior to SMR Jan-2023 Release 1 allows arbitrary code execution.

CVE-2024-20844 [HIGH] CWE-787 CVE-2024-20844: Out-of-bounds write vulnerability while parsing remaining codewords in libsavsac.so prior to SMR Apr Out-of-bounds write vulnerability while parsing remaining codewords in libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code.

CVE-2024-20812 [HIGH] CWE-787 CVE-2024-20812: Out-of-bounds Write in padmd_vld_htbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local att Out-of-bounds Write in padmd_vld_htbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code.

CVE-2024-20846 [HIGH] CWE-787 CVE-2024-20846: Out-of-bounds write vulnerability while decoding hcr of libsavsac.so prior to SMR Apr-2024 Release 1 Out-of-bounds write vulnerability while decoding hcr of libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code.

CVE-2025-21048 [HIGH] CWE-22 CVE-2025-21048: Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to execute arbitrary code.