Samsung Security Vulnerabilities (CVEs)

This vulnerability allows attackers within Bluetooth range to connect to a Samsung device's mobile hotspot without authentication. It affects Samsung ...

This vulnerability in Samsung Galaxy Store allows attackers to bypass URL validation in MCSLaunch deeplinks, enabling them to execute JavaScript APIs ...

This vulnerability in Samsung's Find My Mobile service allows a physical attacker to remotely unlock a lost device by resetting the Samsung Account pa...

This vulnerability allows local attackers with shell privileges to execute arbitrary code on Samsung devices due to improper input validation in the S...

This vulnerability allows attackers to execute arbitrary code or cause denial of service through a stack-based buffer overflow in Samsung's softsimd c...

This vulnerability allows attackers to write data beyond the allocated heap buffer in Samsung's libsavsac.so library, potentially leading to arbitrary...

A buffer overflow vulnerability in Samsung Exynos processors allows attackers to cause abnormal termination (crash) of mobile devices by sending speci...

This vulnerability in libsaped allows local attackers to trigger out-of-bounds read and write operations through improper input validation in the get_...

This vulnerability allows a local attacker to write data beyond allocated memory boundaries in the read_block function of vold (Android volume daemon)...

A stack-based buffer overflow vulnerability in Samsung's HDCP trustlet allows local privileged attackers to execute arbitrary code. This affects Samsu...

This vulnerability allows local attackers to execute privileged activities on Samsung devices due to improper input validation in the Duo component. I...

This vulnerability in Samsung Email allows attackers to perform man-in-the-middle attacks by exploiting improper certificate validation. Attackers can...

This vulnerability allows local attackers to launch activities with system privileges on Samsung devices with Dual Messenger enabled. It affects Samsu...

This vulnerability in Samsung Exynos processors allows attackers to trigger an infinite loop by exploiting improper handling of PPP length parameter i...

This vulnerability allows remote attackers to execute arbitrary code on affected Samsung devices through an out-of-bounds write in the libsimba librar...

This vulnerability allows a local attacker to escalate privileges on Samsung devices due to a parcel mismatch in AuthenticationConfig. It affects Sams...

This vulnerability allows local attackers to bypass access controls in Samsung's HDCP trustlet, enabling arbitrary code execution on affected devices....

This vulnerability allows local attackers to bypass input validation in Samsung's RegisteredMSISDN component, enabling them to execute privileged acti...

This CVE describes a heap out-of-bounds write vulnerability in Samsung's RILD (Radio Interface Layer Daemon) component that handles USIM phonebook cap...

This vulnerability allows attackers to execute arbitrary code on Samsung mobile devices by exploiting a heap out-of-bounds write in the RILD component...

This vulnerability allows local attackers to bypass input validation in SCEPProfile on Samsung devices, enabling them to execute privileged activities...

This vulnerability allows local attackers to bypass security restrictions and execute privileged activities on Samsung devices due to improper input v...

A missing authentication vulnerability in Samsung Galaxy Themes Service allows local attackers to delete arbitrary non-preloaded applications. This af...

This vulnerability allows attackers to write beyond heap memory boundaries in Samsung's RILD (Radio Interface Layer Daemon) component, potentially lea...

This is a heap out-of-bounds write vulnerability in Samsung Exynos baseband firmware that allows remote attackers to execute arbitrary code. It affect...

This vulnerability in Samsung Galaxy Store allows attackers to bypass scheme validation in InstantPlay Deeplink functionality, enabling them to execut...

A cross-site scripting (XSS) vulnerability in Samsung Galaxy Store's InstantPlay feature allows attackers to execute JavaScript that can trigger APK i...

This vulnerability allows local attackers to write arbitrary files with system privileges due to improper access control in Samsung's ThemeManager. It...

This vulnerability allows local attackers to execute arbitrary code on affected Samsung devices by exploiting an out-of-bounds write in the mPOS TUI t...

This vulnerability allows local attackers to execute arbitrary code on Samsung mobile point-of-sale (mPOS) devices due to improper input validation in...

A heap out-of-bounds write vulnerability in Samsung device bootloaders allows physical attackers to execute arbitrary code during the boot process. Th...

This vulnerability allows memory corruption in Samsung baseband chipsets due to improper parameter length checking while parsing SDP fmtp attributes. ...

This vulnerability in Samsung baseband chipsets allows memory corruption when processing Session Description Negotiation for Video Configuration Attri...

This vulnerability allows remote attackers to execute arbitrary code on affected Samsung mobile devices via a crafted 5G network message. It affects S...

A heap-based buffer overflow vulnerability in Samsung's 5G MM message codec allows remote code execution on affected mobile devices. Attackers can exp...

This vulnerability allows remote attackers to execute arbitrary code on affected Samsung mobile devices via a heap-based buffer overflow in the 5G mod...

This vulnerability allows attackers to launch unauthorized activities on Samsung devices due to improper input validation in the UwbDataTxStatusEvent ...

This vulnerability allows a local attacker to bypass file protection mechanisms in Samsung Android devices by exploiting insufficient verification of ...

This vulnerability in Samsung Flow for Android allows attackers on the same network to decrypt encrypted messages or inject malicious commands due to ...

This vulnerability allows local attackers to bypass Galaxy Store's access controls and install applications without proper authorization. It affects S...

This vulnerability allows local attackers to launch activities with Galaxy Store privileges due to improper input validation in AppsPackageInstaller. ...

This vulnerability allows local attackers to launch activities with Galaxy Store privileges through improper input validation in BillingPackageInstall...

This CVE describes an implicit intent hijacking vulnerability in Samsung Cloud that allows attackers to intercept sensitive information. The vulnerabi...

This vulnerability in Samsung SmartThings allows attackers to remotely access sensitive information through a missing caller check in the JavaScript i...

This vulnerability allows attackers to bypass access controls in Samsung's FactoryCamera app, enabling unauthorized access to files with system-level ...

This vulnerability in Samsung Galaxy Store allows remote attackers to install unauthorized apps by bypassing authorization checks. It affects Samsung ...

This vulnerability in Samsung SCX-6x55X printers allows unauthenticated attackers to access SMB user credentials stored in cleartext by viewing HTML s...