Total
513 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2025-21075 | 1 Samsung | 1 Android | 2026-10-18 | N/A | 4.3 MEDIUM |
| Out-of-bounds write in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory. | |||||
| CVE-2025-21074 | 1 Samsung | 1 Android | 2026-10-18 | N/A | 4.3 MEDIUM |
| Out-of-bounds read in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory. | |||||
| CVE-2025-21073 | 1 Samsung | 1 Android | 2026-10-18 | N/A | 6.8 MEDIUM |
| Insecure default configuration in USB connection mode prior to SMR Nov-2025 Release 1 allows privileged physical attackers to access user data. User interaction is required for triggering this vulnerability. | |||||
| CVE-2025-21071 | 1 Samsung | 1 Android | 2026-10-18 | N/A | 5.7 MEDIUM |
| Out-of-bounds write in handling opcode in fingerprint trustlet prior to SMR Nov-2025 Release 1 allows local privileged attackers to write out-of-bounds memory. | |||||
| CVE-2025-21054 | 1 Samsung | 1 Android | 2026-10-08 | N/A | 4.0 MEDIUM |
| Out-of-bounds read in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to potentially access out-of-bounds memory. | |||||
| CVE-2025-21049 | 1 Samsung | 1 Android | 2026-10-08 | N/A | 5.5 MEDIUM |
| Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability. | |||||
| CVE-2025-21050 | 1 Samsung | 1 Android | 2026-10-08 | N/A | 7.1 HIGH |
| Improper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local attackers to access data across multiple user profiles. | |||||
| CVE-2025-21051 | 1 Samsung | 1 Android | 2026-10-08 | N/A | 4.0 MEDIUM |
| Out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to write out-of-bounds memory. | |||||
| CVE-2025-21063 | 1 Samsung | 2 Android, Voice Recorder | 2026-10-08 | N/A | 4.6 MEDIUM |
| Improper access control in Samsung Voice Recorder prior to version 21.5.73.12 in Android 15 and 21.5.81.40 in Android 16 allows physical attackers to access recording files on the lock screen. | |||||
| CVE-2025-21055 | 1 Samsung | 1 Android | 2026-10-08 | N/A | 4.3 MEDIUM |
| Out-of-bounds read and write in libimagecodec.quram.so prior to SMR Oct-2025 Release 1 allows remote attackers to access out-of-bounds memory. | |||||
| CVE-2025-21048 | 1 Samsung | 1 Android | 2026-10-08 | N/A | 6.7 MEDIUM |
| Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to execute arbitrary code. | |||||
| CVE-2025-21047 | 1 Samsung | 1 Android | 2026-10-08 | N/A | 5.2 MEDIUM |
| Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs. | |||||
| CVE-2025-21046 | 1 Samsung | 1 Android | 2026-10-08 | N/A | 2.4 LOW |
| Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list. | |||||
| CVE-2025-21044 | 1 Samsung | 1 Android | 2026-10-08 | N/A | 5.7 MEDIUM |
| Out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write out-of-bounds memory. | |||||
| CVE-2025-21053 | 1 Samsung | 1 Android | 2026-10-08 | N/A | 4.0 MEDIUM |
| Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption. | |||||
| CVE-2025-21052 | 1 Samsung | 1 Android | 2026-10-08 | N/A | 4.0 MEDIUM |
| Out-of-bounds write under specific condition in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption. | |||||
| CVE-2025-21043 | 1 Samsung | 1 Android | 2026-10-08 | N/A | 8.8 HIGH |
| Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code. | |||||
| CVE-2025-21042 | 1 Samsung | 1 Android | 2026-10-08 | N/A | 8.8 HIGH |
| Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code. | |||||
| CVE-2025-21028 | 1 Samsung | 1 Android | 2026-09-30 | N/A | 5.5 MEDIUM |
| Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items. | |||||
| CVE-2026-21098 | 1 Samsung | 1 Android | 2026-09-28 | N/A | 6.1 MEDIUM |
| Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction. | |||||