Samsung Security Vulnerabilities (CVEs)

An insecure default configuration in USB connection mode on Samsung mobile devices allows privileged physical attackers to access user data when the u...

An out-of-bounds read vulnerability in Samsung's libimagecodec.quram.so library allows remote attackers to access memory beyond allocated boundaries. ...

This vulnerability is an out-of-bounds write in Samsung's libimagecodec.quram.so library that allows remote attackers to access out-of-bounds memory. ...

A local privilege escalation vulnerability in Samsung Account allows attackers with physical device access to bypass permission checks and access sens...

This vulnerability allows local attackers to launch arbitrary activities with Samsung Email privileges due to improper input validation. It affects Sa...

An improper access control vulnerability in Samsung Exynos processors allows unauthorized access to log files. This affects devices using Exynos 980, ...

A missing NULL pointer check in Samsung Exynos processors allows attackers to cause Denial of Service by sending malformed MM (Mobility Management) pa...

A vulnerability in Samsung Exynos processors' L2 layer incorrectly handles RLC AM PDUs, allowing attackers to cause denial of service. This affects Sa...

This vulnerability allows local attackers to read memory outside the intended buffer boundaries in Samsung Notes. It affects users of Samsung Notes ve...

This vulnerability allows local attackers to read memory outside the intended bounds when processing image data in Samsung Notes. It affects users of ...

This vulnerability allows local attackers to read memory outside the intended bounds when parsing image data in Samsung Notes. It affects users of Sam...

This vulnerability allows local attackers to perform out-of-bounds memory writes in Samsung Notes' SPI decoder. It affects users of Samsung Notes vers...

Smart Switch versions before 3.7.67.2 store sensitive information in cleartext, allowing local attackers with physical or remote access to read this d...

This vulnerability allows physical attackers to access voice recording files while the device is locked. It affects Samsung Voice Recorder on Android ...

This vulnerability allows attackers on the same network to bypass authentication in Samsung Smart Switch and access data being transferred between dev...

An out-of-bounds read vulnerability in Samsung Notes' SPI decoder allows local attackers to access memory beyond intended boundaries. This affects Sam...

This vulnerability allows local attackers to read out-of-bounds memory during JPEG header parsing in Samsung's libpadm.so library. It affects Samsung ...

This vulnerability in Samsung's libimagecodec.quram.so library allows remote attackers to read and write beyond allocated memory boundaries. It affect...

This vulnerability in Samsung Notes allows local attackers to access shared notes through improper use of implicit intents. It affects Samsung Notes v...

Samsung Smart Switch versions before 3.7.67.2 store sensitive application backup data in cleartext, allowing local attackers with physical or remote a...

A relative path traversal vulnerability in Samsung Knox Enterprise allows local attackers to execute arbitrary code by manipulating file paths. This a...

An improper access control vulnerability in Samsung's SecSettings component allows local attackers to access sensitive information when user interacti...

This vulnerability allows local attackers to bypass user profile isolation in Samsung's Contacts application, enabling unauthorized access to contact ...

This vulnerability allows local attackers to cause memory corruption through an out-of-bounds write during JPEG decoding in libpadm.so. It affects Sam...

This vulnerability allows local attackers to trigger memory corruption through an out-of-bounds write in the JPEG header parsing functionality of libp...

This vulnerability allows local attackers to access sensitive information stored insecurely on Galaxy Watch devices. It affects Galaxy Watch users who...

This vulnerability allows physical attackers with device access to use privileged KnoxGuard APIs due to improper access control. It affects Samsung de...

This vulnerability allows local privileged attackers to write out-of-bounds memory in the fingerprint trustlet component. It affects Samsung devices r...

This vulnerability in Samsung's GoodLock app allows local attackers to bypass security controls and install arbitrary applications from Galaxy Store w...

This vulnerability allows local attackers to access sensitive information stored in Samsung's Secure Folder on Android devices. It affects Samsung dev...

This vulnerability in Samsung Notes allows physical attackers to access data across multiple user profiles on the same device when they have physical ...

This vulnerability in Samsung's S Assistant allows local attackers to modify itinerary information due to improper intent verification. It affects Sam...

This vulnerability in S Assistant allows local attackers to modify itinerary information due to improper intent verification in SystemExceptionalBroad...

This vulnerability in S Assistant allows local attackers to modify itinerary information due to improper intent verification in ExternalBroadcastRecei...

This vulnerability allows local attackers to perform out-of-bounds writes in libsavsvc.so, potentially leading to arbitrary code execution. It affects...

This vulnerability allows physical attackers to bypass user profile isolation in Samsung Calendar, potentially accessing calendar data from other user...

A local privilege escalation vulnerability in Samsung Notes allows attackers with physical device access to access exported note files they shouldn't ...

This vulnerability allows physical attackers to bypass Kiosk mode on Samsung devices running One UI Home before the September 2025 security update. It...

This vulnerability allows local attackers to bypass access controls in Samsung's ContactProvider component, potentially exposing sensitive contact inf...

This vulnerability allows local attackers with insufficient permissions to send arbitrary replies to messages from the cover display on Samsung device...

This vulnerability allows local attackers to bypass access controls in ImsService on Samsung devices, enabling unauthorized use of privileged APIs. It...

This vulnerability in Samsung's ImsService allows local attackers with insufficient permissions to interrupt phone calls. It affects Samsung devices r...

This vulnerability allows local attackers to temporarily disable the SIM card on affected Samsung devices by exploiting improper intent verification i...

A privilege management vulnerability in Samsung's ThemeManager allows local privileged attackers to bypass trial restrictions and reuse trial items. T...

An improper access control vulnerability in Samsung Galaxy Store allows local attackers to access protected data through an exported service. This aff...

This vulnerability allows local attackers to bypass background execution management controls on Samsung devices. Attackers with physical access or loc...

An improper input validation vulnerability in CertByte on Samsung devices allows local attackers to escalate privileges and execute privileged activit...

A missing authorization vulnerability in Samsung Camera apps allows physical attackers to install packages through the Galaxy Store before completing ...

This vulnerability allows local attackers to read protected data from Samsung device memory due to a buffer boundary error in the TIGERF trustlet. It ...

This vulnerability allows remote attackers to bypass authorization in Smart Suggestions on affected Samsung Android devices, enabling unauthorized sch...