Samsung Android vulnerabilities

CVE-2025-20903 [HIGH] CVE-2025-20903: Improper access control in SecSettingsIntelligence prior to SMR Mar-2025 Release 1 allows local atta Improper access control in SecSettingsIntelligence prior to SMR Mar-2025 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability.

CVE-2025-20909 [MEDIUM] CVE-2025-20909: Use of implicit intent for sensitive communication in Settings prior to SMR Mar-2025 Release 1 allow Use of implicit intent for sensitive communication in Settings prior to SMR Mar-2025 Release 1 allows local attackers to access sensitive information.

CVE-2025-20908 [MEDIUM] CVE-2025-20908: Use of insufficiently random values in Auracast prior to SMR Mar-2025 Release 1 allows adjacent atta Use of insufficiently random values in Auracast prior to SMR Mar-2025 Release 1 allows adjacent attackers to access Auracast broadcasting.

CVE-2025-20882 [HIGH] CWE-787 CVE-2025-20882: Out-of-bounds write in accessing uninitialized memory for svc1td in libsthmbc.so prior to SMR Jan-20 Out-of-bounds write in accessing uninitialized memory for svc1td in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability.

CVE-2025-20881 [HIGH] CWE-787 CVE-2025-20881: Out-of-bounds write in accessing buffer storing the decoded video frames in libsthmbc.so prior to SM Out-of-bounds write in accessing buffer storing the decoded video frames in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability.

CVE-2025-20890 [HIGH] CWE-787 CVE-2025-20890: Out-of-bounds write in decoding frame buffer in libsthmbc.so prior to SMR Jan-2025 Release 1 allows Out-of-bounds write in decoding frame buffer in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability.

CVE-2025-20888 [HIGH] CWE-787 CVE-2025-20888: Out-of-bounds write in handling the block size for smp4vtd in libsthmbc.so prior to SMR Jan-2025 Rel Out-of-bounds write in handling the block size for smp4vtd in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability.

CVE-2025-20889 [MEDIUM] CWE-787 CVE-2025-20889: Out-of-bounds read in decoding malformed bitstream for smp4vtd in libsthmbc.so prior to SMR Jan-2025 Out-of-bounds read in decoding malformed bitstream for smp4vtd in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitrary memory. User interaction is required for triggering this vulnerability.

CVE-2025-20883 [MEDIUM] CVE-2025-20883: Improper access control in SoundPicker prior to SMR Jan-2025 Release 1 allows physical attackers to Improper access control in SoundPicker prior to SMR Jan-2025 Release 1 allows physical attackers to access data across multiple user profiles.

CVE-2025-20905 [MEDIUM] CWE-125 CVE-2025-20905: Out-of-bounds read and write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privi Out-of-bounds read and write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privileged attackers to read and write out-of-bounds memory.

CVE-2025-20907 [MEDIUM] CVE-2025-20907: Improper privilege management in Samsung Find prior to SMR Feb-2025 Release 1 allows local privilege Improper privilege management in Samsung Find prior to SMR Feb-2025 Release 1 allows local privileged attackers to disable Samsung Find.

CVE-2025-20885 [MEDIUM] CWE-787 CVE-2025-20885: Out-of-bounds write in softsim trustlet prior to SMR Jan-2025 Release 1 allows local privileged atta Out-of-bounds write in softsim trustlet prior to SMR Jan-2025 Release 1 allows local privileged attackers to cause memory corruption.

CVE-2025-20904 [MEDIUM] CWE-787 CVE-2025-20904: Out-of-bounds write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privileged att Out-of-bounds write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privileged attackers to cause memory corruption.

CVE-2025-20892 [MEDIUM] CVE-2025-20892: Protection Mechanism Failure in bootloader prior to SMR Jan-2025 Release 1 allows physical attackers Protection Mechanism Failure in bootloader prior to SMR Jan-2025 Release 1 allows physical attackers to allow to execute fastboot command. User interaction is required for triggering this vulnerability.

CVE-2025-20893 [MEDIUM] CVE-2025-20893: Improper access control in NotificationManager prior to SMR Jan-2025 Release 1 allows local attacker Improper access control in NotificationManager prior to SMR Jan-2025 Release 1 allows local attackers to change the configuration of notifications.

CVE-2025-20891 [MEDIUM] CWE-125 CVE-2025-20891: Out-of-bounds read in decoding malformed bitstream of video thumbnails in libsthmbc.so prior to SMR Out-of-bounds read in decoding malformed bitstream of video thumbnails in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitrary memory. User interaction is required for triggering this vulnerability.

CVE-2025-20887 [MEDIUM] CWE-125 CVE-2025-20887: Out-of-bounds read in accessing table used for svp8t in libsthmbc.so prior to SMR Jan-2025 Release 1 Out-of-bounds read in accessing table used for svp8t in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitrary memory. User interaction is required for triggering this vulnerability.

CVE-2025-20884 [MEDIUM] CVE-2025-20884: Improper access control in Samsung Message prior to SMR Jan-2025 Release 1 allows physical attackers Improper access control in Samsung Message prior to SMR Jan-2025 Release 1 allows physical attackers to access data across multiple user profiles.

CVE-2025-20886 [MEDIUM] CWE-922 CVE-2025-20886: Inclusion of sensitive information in test code in softsim trustlet prior to SMR Jan-2025 Release 1 Inclusion of sensitive information in test code in softsim trustlet prior to SMR Jan-2025 Release 1 allows local privileged attackers to get test key.

CVE-2024-49422 [LOW] CVE-2024-49422: Protection Mechanism Failure in bootloader prior to SMR Oct-2024 Release 1 allows physical attackers Protection Mechanism Failure in bootloader prior to SMR Oct-2024 Release 1 allows physical attackers to reset lockscreen failure count by hardware fault injection. User interaction is required for triggering this vulnerability.