Samsung Android vulnerabilities

CVE-2023-42562 [HIGH] CWE-190 CVE-2023-42562: Integer overflow vulnerability in detectionFindFaceSupportMultiInstance of libFacePreProcessingjni.c Integer overflow vulnerability in detectionFindFaceSupportMultiInstance of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow.

CVE-2023-21499 [HIGH] CWE-787 CVE-2023-21499: Out-of-bounds write vulnerability in TA_Communication_mpos_encrypt_pin in mPOS TUI trustlet prior to Out-of-bounds write vulnerability in TA_Communication_mpos_encrypt_pin in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to execute arbitrary code.

CVE-2023-30712 [HIGH] CWE-20 CVE-2023-30712: Improper input validation in Settings Suggestions prior to SMR Sep-2023 Release 1 allows attackers t Improper input validation in Settings Suggestions prior to SMR Sep-2023 Release 1 allows attackers to launch arbitrary activity.

CVE-2024-20849 [HIGH] CWE-787 CVE-2024-20849: Out-of-bound Write vulnerability in chunk parsing implementation of libsdffextractor prior to SMR Ap Out-of-bound Write vulnerability in chunk parsing implementation of libsdffextractor prior to SMR Apr-2023 Release 1 allows local attackers to execute arbitrary code.

CVE-2024-20819 [HIGH] CWE-787 CVE-2024-20819: Out-of-bounds Write vulnerabilities in svc1td_vld_plh_ap of libsthmbc.so prior to SMR Feb-2024 Relea Out-of-bounds Write vulnerabilities in svc1td_vld_plh_ap of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.

CVE-2024-20818 [HIGH] CWE-787 CVE-2024-20818: Out-of-bounds Write vulnerabilities in svc1td_vld_elh of libsthmbc.so prior to SMR Feb-2024 Release Out-of-bounds Write vulnerabilities in svc1td_vld_elh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.

CVE-2024-20817 [HIGH] CWE-787 CVE-2024-20817: Out-of-bounds Write vulnerabilities in svc1td_vld_slh of libsthmbc.so prior to SMR Feb-2024 Release Out-of-bounds Write vulnerabilities in svc1td_vld_slh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.

CVE-2024-34612 [HIGH] CWE-787 CVE-2024-34612: Out-of-bound write in libcodec2secmp4vdec.so prior to SMR Aug-2024 Release 1 allows local attackers Out-of-bound write in libcodec2secmp4vdec.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code.

CVE-2024-34614 [HIGH] CWE-787 CVE-2024-34614: Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to execute a Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code.

CVE-2024-20893 [HIGH] CWE-787 CVE-2024-20893: Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows loca Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows local attackers to trigger memory corruption.

CVE-2023-21421 [HIGH] CWE-280 CVE-2023-21421: Improper Handling of Insufficient Permissions or Privileges vulnerability in KnoxCustomManagerServic Improper Handling of Insufficient Permissions or Privileges vulnerability in KnoxCustomManagerService prior to SMR Jan-2023 Release 1 allows attacker to access device SIM PIN.

CVE-2024-34678 [HIGH] CWE-787 CVE-2024-34678: Out-of-bounds write in libsapeextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to Out-of-bounds write in libsapeextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption.

CVE-2024-20901 [HIGH] CWE-787 CVE-2024-20901: Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local attackers to write out-of-bounds memory.

CVE-2025-20957 [HIGH] CVE-2025-20957: Improper access control in SmartManagerCN prior to SMR May-2025 Release 1 allows local attackers to Improper access control in SmartManagerCN prior to SMR May-2025 Release 1 allows local attackers to launch arbitrary activities with SmartManagerCN privilege.

CVE-2023-30679 [HIGH] CVE-2023-30679: Improper access control in HDCP trustlet prior to SMR Aug-2023 Release 1 allows local attackers to e Improper access control in HDCP trustlet prior to SMR Aug-2023 Release 1 allows local attackers to execute arbitrary code.

CVE-2023-21468 [HIGH] CVE-2023-21468: Improper access control vulnerability in Telephony prior to SMR Apr-2023 Release 1 allows attackers Improper access control vulnerability in Telephony prior to SMR Apr-2023 Release 1 allows attackers to access files with escalated permission.

CVE-2026-21010 [HIGH] CVE-2026-21010: Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to t Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions.

CVE-2026-21029 [HIGH] CVE-2026-21029: Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Re Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 allows local attacker to execute privileged operations.

CVE-2026-21031 [HIGH] CWE-863 CVE-2026-21031: Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch a Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. User interaction is required for triggering this vulnerability.

CVE-2023-42530 [HIGH] CVE-2023-42530: Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attacker Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct without User Interaction.