Samsung Mobile Devices vulnerabilities

375 known vulnerabilities affecting samsung_mobile/samsung_mobile_devices.

Total CVEs

375

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL37HIGH101MEDIUM142LOW95

Vulnerabilities

Page 19 of 19

CVE-2021-25370MEDIUMCVSS 4.4KEV≥ Selected O(8.X), P(9.0), Q(10.0), R(11.0) , < SMR Mar-2021 Release 12021-03-26

CVE-2021-25370 [MEDIUM] CWE-416 CVE-2021-25370: An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 r An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic.

cvelistv5nvd

CVE-2021-25372MEDIUMCVSS 6.7KEV≥ Q(10.0), R(11.0) devices with exynos980, exynos2100, exynos9830, < SMR Mar-2021 Release 12021-03-26

CVE-2021-25372 [MEDIUM] CWE-787 CVE-2021-25372: An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.

cvelistv5nvd

CVE-2021-25369MEDIUMCVSS 5.5KEV≥ O(8.x), P(9.0), Q(10.0), < SMR Mar-2021 Release 12021-03-26

CVE-2021-25369 [MEDIUM] CWE-200 CVE-2021-25369: An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sen An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.

cvelistv5nvd

CVE-2021-25371MEDIUMCVSS 6.7KEV≥ Q(10.0), R(11.0) devices with exynos980, exynos2100, exynos9830, < SMR Mar-2021 Release 12021-03-26

CVE-2021-25371 [MEDIUM] CWE-912 CVE-2021-25371: A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF li A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.

cvelistv5nvd

CVE-2021-25346CRITICALCVSS 9.8≥ O(8.x), P(9.0), Q(10.0), < SMR Jan-2021 Release 12021-03-04

CVE-2021-25346 [CRITICAL] CWE-787 CVE-2021-25346: A possible arbitrary memory overwrite vulnerabilities in quram library version prior to SMR Jan-2021 A possible arbitrary memory overwrite vulnerabilities in quram library version prior to SMR Jan-2021 Release 1 allow arbitrary code execution.

cvelistv5nvd

CVE-2021-25337HIGHCVSS 7.1KEV≥ Selected P(9.0), Q(10.0), R(11.0), < SMR Mar-2021 Release 12021-03-04

CVE-2021-25337 [HIGH] CWE-269 CVE-2021-25337: Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files.

cvelistv5nvd

CVE-2021-25344MEDIUMCVSS 5.5≥ Q(10.0), R(11.0), < SMR Mar-2021 Release 12021-03-04

CVE-2021-25344 [MEDIUM] CWE-862 CVE-2021-25344: Missing permission check in knox_custom service prior to SMR Mar-2021 Release 1 allows attackers to Missing permission check in knox_custom service prior to SMR Mar-2021 Release 1 allows attackers to gain access to device's serial number without permission.

cvelistv5nvd

CVE-2021-25339MEDIUMCVSS 5.2≥ Selected Q(10.0), R(11.0), < SMR Mar-2021 Release 12021-03-04

CVE-2021-25339 [MEDIUM] CWE-20 CVE-2021-25339: Improper address validation in HArx in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows Improper address validation in HArx in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, given a compromised kernel, to corrupt EL2 memory.

cvelistv5nvd

CVE-2021-25345MEDIUMCVSS 5.5≥ Q(10.0), R(11.0), < SMR Mar-2021 Release 12021-03-04

CVE-2021-25345 [MEDIUM] CVE-2021-25345: Graphic format mismatch while converting video format in hwcomposer prior to SMR Mar-2021 Release 1 Graphic format mismatch while converting video format in hwcomposer prior to SMR Mar-2021 Release 1 results in kernel panic due to unsupported format.

cvelistv5nvd

CVE-2021-25347MEDIUMCVSS 5.3≥ P(9.0), Q(10.0), R(11.0), < SMR Feb-2021 Release 12021-03-04

CVE-2021-25347 [MEDIUM] CWE-287 CVE-2021-25347: Hijacking vulnerability in Samsung Email application version prior to SMR Feb-2021 Release 1 allows Hijacking vulnerability in Samsung Email application version prior to SMR Feb-2021 Release 1 allows attackers to intercept when the provider is executed.

cvelistv5nvd

CVE-2021-25338MEDIUMCVSS 5.2≥ Selected Q(10.0), R(11.0), < SMR Mar-2021 Release 12021-03-04

CVE-2021-25338 [MEDIUM] CWE-20 CVE-2021-25338: Improper memory access control in RKP in Samsung mobile devices prior to SMR Mar-2021 Release 1 allo Improper memory access control in RKP in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, given a compromised kernel, to write certain part of RKP EL2 memory region.

cvelistv5nvd

CVE-2021-25334MEDIUMCVSS 5.5≥ P(9.0), Q(10.0) , R(11.0), < SMR Feb-2021 Release 12021-03-04

CVE-2021-25334 [MEDIUM] CWE-20 CVE-2021-25334: Improper input check in wallpaper service in Samsung mobile devices prior to SMR Feb-2021 Release 1 Improper input check in wallpaper service in Samsung mobile devices prior to SMR Feb-2021 Release 1 allows untrusted application to cause permanent denial of service.

cvelistv5nvd

CVE-2021-25335LOWCVSS 2.5≥ Selected Q(10.0), < SMR Mar-2021 Release 12021-03-04

CVE-2021-25335 [LOW] CWE-703 CVE-2021-25335: Improper lockscreen status check in cocktailbar service in Samsung mobile devices prior to SMR Mar-2 Improper lockscreen status check in cocktailbar service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows unauthenticated users to access hidden notification contents over the lockscreen in specific condition.

cvelistv5nvd

CVE-2021-25336LOWCVSS 3.3≥ P(9.0), Q(10.0), < SMR Mar-2021 Release 12021-03-04

CVE-2021-25336 [LOW] CWE-269 CVE-2021-25336: Improper access control in NotificationManagerService in Samsung mobile devices prior to SMR Mar-202 Improper access control in NotificationManagerService in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to acquire notification access via sending a crafted malicious intent.

cvelistv5nvd

CVE-2021-25330HIGHCVSS 7.5vSelected Q(10.0) prior to SMR Feb-2021 Release 12021-03-02

CVE-2021-25330 [HIGH] CVE-2021-25330: Calling of non-existent provider in MobileWips application prior to SMR Feb-2021 Release 1 allows unauthorized actions including denial of service att Calling of non-existent provider in MobileWips application prior to SMR Feb-2021 Release 1 allows unauthorized actions including denial of service attack by hijacking the provider.

cvelistv5

← Previous19 / 19