Samsung Android vulnerabilities
502 known vulnerabilities affecting samsung/android.
Total CVEs
502
CISA KEV
12
actively exploited
Public exploits
1
Exploited in wild
12
Severity breakdown
CRITICAL11HIGH181MEDIUM243LOW67
Vulnerabilities
Page 4 of 26
CVE-2026-21088P3HIGHCVSS 7.8v14.0v14.0-smr-apr-2022-r1+93 more2026-09-09
CVE-2026-21088 [HIGH] CWE-20 CVE-2026-21088: Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Re
Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
nvd
CVE-2026-21089P3HIGHCVSS 7.8v14.0v14.0-smr-apr-2022-r1+93 more2026-09-09
CVE-2026-21089 [HIGH] CWE-20 CVE-2026-21089: Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release
Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
nvd
CVE-2026-21069P3HIGHCVSS 7.8v14.0v14.0-smr-apr-2022-r1+89 more2026-08-10
CVE-2026-21069 [HIGH] CWE-681 CVE-2026-21069: Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Releas
Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
nvd
CVE-2025-20936P3HIGHCVSS 7.8v13.0v14.0+1 more2025-04-08
CVE-2025-20936 [HIGH] CVE-2025-20936: Improper access control in HDCP trustlet prior to SMR Apr-2025 Release 1 allows local attackers with
Improper access control in HDCP trustlet prior to SMR Apr-2025 Release 1 allows local attackers with shell privilege to escalate their privileges to root.
nvd
CVE-2026-20979P3HIGHCVSS 7.8v15.0v16.02026-02-04
CVE-2026-20979 [HIGH] CVE-2026-20979: Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to
Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Settings privilege.
nvd
CVE-2026-20970P3HIGHCVSS 7.8v15.0v16.02026-01-09
CVE-2026-20970 [HIGH] CVE-2026-20970: Improper access control in SLocation prior to SMR Jan-2026 Release 1 allows local attackers to execu
Improper access control in SLocation prior to SMR Jan-2026 Release 1 allows local attackers to execute the privileged APIs.
nvd
CVE-2023-30727P3HIGHCVSS 7.5v11.0v12.0+1 more2023-10-04
CVE-2023-30727 [HIGH] CVE-2023-30727: Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attacker
Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi and connect arbitrary Wi-Fi without User Interaction.
nvd
CVE-2025-21074P3HIGHCVSS 7.5v13.0v13.0-smr-apr-2022-r1+109 more2025-11-05
CVE-2025-21074 [HIGH] CWE-125 CVE-2025-21074: Out-of-bounds read in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers
Out-of-bounds read in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory.
nvd
CVE-2025-58479P3HIGHCVSS 7.5v13.0v13.0-smr-apr-2022-r1+114 more2025-12-02
CVE-2025-58479 [HIGH] CWE-125 CVE-2025-58479: Out-of-bounds read in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers
Out-of-bounds read in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.
nvd
CVE-2023-30739P3HIGHCVSS 7.8v11.0v12.0+1 more2023-11-07
CVE-2023-30739 [HIGH] CVE-2023-30739: Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows l
Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code.
nvd
CVE-2024-20878P3HIGHCVSS 7.8v12.0v13.0+1 more2024-06-04
CVE-2024-20878 [HIGH] CWE-787 CVE-2024-20878: Heap out-of-bound write vulnerability in parsing grid image in libsavscmn.so prior to SMR June-2024
Heap out-of-bound write vulnerability in parsing grid image in libsavscmn.so prior to SMR June-2024 Release 1 allows local attackers to execute arbitrary code.
nvd
CVE-2024-20877P3HIGHCVSS 7.8v12.0v13.0+1 more2024-06-04
CVE-2024-20877 [HIGH] CWE-787 CVE-2024-20877: Heap out-of-bound write vulnerability in parsing grid image header in libsavscmn.so prior to SMR Jun
Heap out-of-bound write vulnerability in parsing grid image header in libsavscmn.so prior to SMR Jun-2024 Release 1 allows local attackers to execute arbitrary code.
nvd
CVE-2023-30644P3HIGHCVSS 7.8v11.0v12.0+1 more2023-07-06
CVE-2023-30644 [HIGH] CWE-787 CVE-2023-30644: Stack out of bound write vulnerability in CdmaSmsParser of RILD prior to SMR Jul-2023 Release 1 allo
Stack out of bound write vulnerability in CdmaSmsParser of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code.
nvd
CVE-2023-30693P3HIGHCVSS 7.8v11.0v12.0+1 more2023-08-10
CVE-2023-30693 [HIGH] CWE-787 CVE-2023-30693: Out-of-bounds Write in DoOemFactorySendFactoryBypassCommand of libsec-ril prior to SMR Aug-2023 Rele
Out-of-bounds Write in DoOemFactorySendFactoryBypassCommand of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.
nvd
CVE-2023-30689P3HIGHCVSS 7.8v11.0v12.0+1 more2023-08-10
CVE-2023-30689 [HIGH] CWE-787 CVE-2023-30689: Out-of-bounds Write in BuildOemEmbmsGetSigStrengthResponse of libsec-ril prior to SMR Aug-2023 Relea
Out-of-bounds Write in BuildOemEmbmsGetSigStrengthResponse of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.
nvd
CVE-2023-30694P3HIGHCVSS 7.8v11.0v12.0+1 more2023-08-10
CVE-2023-30694 [HIGH] CWE-787 CVE-2023-30694: Out-of-bounds Write in IpcTxPcscTransmitApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows lo
Out-of-bounds Write in IpcTxPcscTransmitApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.
nvd
CVE-2023-30687P3HIGHCVSS 7.8v11.0v12.0+1 more2023-08-10
CVE-2023-30687 [HIGH] CWE-787 CVE-2023-30687: Out-of-bounds Write in RmtUimApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacke
Out-of-bounds Write in RmtUimApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.
nvd
CVE-2023-30686P3HIGHCVSS 7.8v11.0v12.0+1 more2023-08-10
CVE-2023-30686 [HIGH] CWE-787 CVE-2023-30686: Out-of-bounds Write in ReqDataRaw of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacke
Out-of-bounds Write in ReqDataRaw of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.
nvd
CVE-2023-30688P3HIGHCVSS 7.8v11.0v12.0+1 more2023-08-10
CVE-2023-30688 [HIGH] CWE-787 CVE-2023-30688: Out-of-bounds Write in MakeUiccAuthForOem of libsec-ril prior to SMR Aug-2023 Release 1 allows local
Out-of-bounds Write in MakeUiccAuthForOem of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.
nvd
CVE-2023-30668P3HIGHCVSS 7.8v11.0v12.0+1 more2023-07-06
CVE-2023-30668 [HIGH] CWE-787 CVE-2023-30668: Out-of-bounds Write in BuildOemSecureSimLockResponse of libsec-ril prior to SMR Jul-2023 Release 1 a
Out-of-bounds Write in BuildOemSecureSimLockResponse of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacker to execute arbitrary code.
nvd