Vulnerabilities (CVE)

Filtered by vendor Samsung Subscribe
Filtered by product Android
Total 509 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-21043 1 Samsung 1 Android 2026-06-17 N/A 8.8 HIGH
Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.
CVE-2025-21042 1 Samsung 1 Android 2026-06-17 N/A 8.8 HIGH
Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.
CVE-2025-21041 1 Samsung 1 Android 2026-06-17 N/A 6.2 MEDIUM
Insecure Storage of Sensitive Information in Secure Folder prior to Android 16 allows local attackers to access sensitive information.
CVE-2025-21034 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Out-of-bounds write in libsavsvc.so prior to SMR Sep-2025 Release 1 allows local attackers to potentially execute arbitrary code.
CVE-2025-21033 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Improper access control in ContactProvider prior to SMR Sep-2025 Release 1 allows local attackers to access sensitive information.
CVE-2025-21032 1 Samsung 1 Android 2026-06-17 N/A 5.9 MEDIUM
Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions.
CVE-2025-21031 1 Samsung 1 Android 2026-06-17 N/A 6.8 MEDIUM
Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs.
CVE-2025-21029 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Improper handling of insufficient permission in System UI prior to SMR Sep-2025 Release 1 allows local attackers to send arbitrary replies to messages from the cover display.
CVE-2025-21028 1 Samsung 1 Android 2026-06-17 N/A 5.5 MEDIUM
Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items.
CVE-2025-21027 1 Samsung 1 Android 2026-06-17 N/A 5.1 MEDIUM
Improper verification of intent by broadcast receiver in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to temporarily disable the SIM.
CVE-2025-21026 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Improper handling of insufficient permission in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to interrupt the call.
CVE-2025-21025 1 Samsung 1 Android 2026-06-17 N/A 5.1 MEDIUM
Improper access control in MARsExemptionManager prior to SMR Sep-2025 Release 1 allows local attackers to be excluded from background execution management.
CVE-2025-21015 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to delete file with Document scanner's privilege.
CVE-2025-21014 1 Samsung 1 Android 2026-06-17 N/A 4.3 MEDIUM
Improper export of android application component in Emergency SoS prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information.
CVE-2025-21010 1 Samsung 1 Android 2026-06-17 N/A 6.0 MEDIUM
Improper privilege management in SamsungAccount prior to SMR Aug-2025 Release 1 allows local privileged attackers to deactivate Samsung account.
CVE-2025-21009 1 Samsung 1 Android 2026-06-17 N/A 5.5 MEDIUM
Out-of-bounds read in decoding malformed frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.
CVE-2025-21008 1 Samsung 1 Android 2026-06-17 N/A 5.5 MEDIUM
Out-of-bounds read in decoding frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.
CVE-2025-21007 1 Samsung 1 Android 2026-06-17 N/A 5.5 MEDIUM
Out-of-bounds write in accessing uninitialized memory in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.
CVE-2025-21006 1 Samsung 1 Android 2026-06-17 N/A 7.0 HIGH
Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 allows local attackers to write out-of-bounds memory.
CVE-2025-21005 1 Samsung 1 Android 2026-06-17 N/A 5.5 MEDIUM
Improper access control in isemtelephony prior to Android 15 allows local attackers to access sensitive information.