Samsung Android vulnerabilities

CVE-2023-30669 [HIGH] CWE-787 CVE-2023-30669: Out-of-bounds Write in DoOemFactorySendFactoryTestResult of libsec-ril prior to SMR Jul-2023 Release Out-of-bounds Write in DoOemFactorySendFactoryTestResult of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacker to execute arbitrary code.

CVE-2023-30670 [HIGH] CWE-787 CVE-2023-30670: Out-of-bounds Write in BuildIpcFactoryDeviceTestEvent of libsec-ril prior to SMR Jul-2023 Release 1 Out-of-bounds Write in BuildIpcFactoryDeviceTestEvent of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacker to execute arbitrary code.

CVE-2023-30696 [HIGH] CWE-787 CVE-2023-30696: An improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1 all An improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.

CVE-2023-30697 [HIGH] CWE-787 CVE-2023-30697: An improper input validation in IpcTxCfgSetSimlockPayload in libsec-ril prior to SMR Aug-2023 Releas An improper input validation in IpcTxCfgSetSimlockPayload in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.

CVE-2023-30681 [HIGH] CWE-787 CVE-2023-30681: An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SM An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.

CVE-2023-30733 [HIGH] CWE-787 CVE-2023-30733: Stack-based Buffer Overflow in vulnerability HDCP trustlet prior to SMR Oct-2023 Release 1 allows lo Stack-based Buffer Overflow in vulnerability HDCP trustlet prior to SMR Oct-2023 Release 1 allows local privileged attackers to perform code execution.

CVE-2023-30680 [HIGH] CWE-269 CVE-2023-30680: Improper privilege management vulnerability in MMIGroup prior to SMR Aug-2023 Release 1 allows code Improper privilege management vulnerability in MMIGroup prior to SMR Aug-2023 Release 1 allows code execution with privilege.

CVE-2024-49410 [HIGH] CWE-787 CVE-2024-49410: Out-of-bounds write in libswmfextractor.so prior to SMR Dec-2024 Release 1 allows local attackers to Out-of-bounds write in libswmfextractor.so prior to SMR Dec-2024 Release 1 allows local attackers to execute arbitrary code.

CVE-2024-20884 [HIGH] CVE-2024-20884: Incorrect use of privileged API vulnerability in getSemBatteryUsageStats in BatteryStatsService prio Incorrect use of privileged API vulnerability in getSemBatteryUsageStats in BatteryStatsService prior to SMR Jun-2024 Release 1 allows local attackers to use privileged API.

CVE-2024-20883 [HIGH] CVE-2024-20883: Incorrect use of privileged API vulnerability in registerBatteryStatsCallback in BatteryStatsService Incorrect use of privileged API vulnerability in registerBatteryStatsCallback in BatteryStatsService prior to SMR Jun-2024 Release 1 allows local attackers to use privileged API.

CVE-2026-20983 [HIGH] CVE-2026-20983: Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Samsung Dialer privilege.

CVE-2025-21006 [HIGH] CWE-787 CVE-2025-21006: Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 allows local attackers to write out-of-bounds memory.

CVE-2025-21034 [HIGH] CWE-787 CVE-2025-21034: Out-of-bounds write in libsavsvc.so prior to SMR Sep-2025 Release 1 allows local attackers to potent Out-of-bounds write in libsavsvc.so prior to SMR Sep-2025 Release 1 allows local attackers to potentially execute arbitrary code.

CVE-2025-21053 [HIGH] CWE-787 CVE-2025-21053: Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Rele Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.

CVE-2025-21052 [HIGH] CWE-787 CVE-2025-21052: Out-of-bounds write under specific condition in the pre-processing of JPEG decoding in libpadm.so pr Out-of-bounds write under specific condition in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.

CVE-2025-21051 [HIGH] CWE-787 CVE-2025-21051: Out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Relea Out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2026-21086 [HIGH] CWE-20 CVE-2026-21086: Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to acc Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to access proxy configuration.

CVE-2026-21030 [HIGH] CVE-2026-21030: Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger privileged functions.

CVE-2023-42528 [HIGH] CWE-787 CVE-2023-42528: Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Re Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code.

CVE-2023-42563 [HIGH] CWE-190 CVE-2023-42563: Integer overflow vulnerability in landmarkCopyImageToNative of libFacePreProcessingjni.camera.samsun Integer overflow vulnerability in landmarkCopyImageToNative of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow.