samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
CVE-2025-54449 CRITICAL
Component: magicinfo_9_server

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects Magic...

📅 2025-07-23
CVSS 9.8 Dossier →
CVE-2025-54448 CRITICAL
Component: magicinfo_9_server

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects Magic...

📅 2025-07-23
CVSS 9.8 Dossier →
Component: magicinfo_9_server

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects Magic...

📅 2025-07-23
CVSS 8.1 Dossier →
CVE-2025-54446 CRITICAL
Component: magicinfo_9_server

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a...

📅 2025-07-23
CVSS 9.8 Dossier →
Component: magicinfo_9_server

Improper Restriction of XML External Entity Reference vulnerability in Samsung Electronics MagicINFO 9 Server allows Server Side Request Forgery.This ...

📅 2025-07-23
CVSS 8.2 Dossier →
CVE-2025-54444 CRITICAL
Component: magicinfo_9_server

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects Magic...

📅 2025-07-23
CVSS 9.8 Dossier →
CVE-2025-54443 CRITICAL
Component: magicinfo_9_server

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a...

📅 2025-07-23
CVSS 9.8 Dossier →
CVE-2025-54442 CRITICAL
Component: magicinfo_9_server

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects Magic...

📅 2025-07-23
CVSS 9.8 Dossier →
Component: magicinfo_9_server

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects Magic...

📅 2025-07-23
CVSS 8.8 Dossier →
CVE-2025-54440 CRITICAL
Component: magicinfo_9_server

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects Magic...

📅 2025-07-23
CVSS 9.8 Dossier →
Component: magicinfo_9_server

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects Magic...

📅 2025-07-23
CVSS 8.8 Dossier →
CVE-2025-54438 CRITICAL
Component: magicinfo_9_server

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a...

📅 2025-07-23
CVSS 9.8 Dossier →
Component: android

Out-of-bounds read in decoding malformed frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption....

📅 2025-07-08
CVSS 5.5 Dossier →
Component: android

Out-of-bounds read in decoding frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption....

📅 2025-07-08
CVSS 5.5 Dossier →
Component: android

Out-of-bounds write in accessing uninitialized memory in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption....

📅 2025-07-08
CVSS 5.5 Dossier →
Component: android

Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 allows local attackers to write out-of-bounds memo...

📅 2025-07-08
CVSS 7.0 Dossier →
Component: android

Improper access control in isemtelephony prior to Android 15 allows local attackers to access sensitive information....

📅 2025-07-08
CVSS 5.5 Dossier →
Component: wear_os

Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to power of...

📅 2025-07-08
CVSS 6.2 Dossier →
Component: android

Insecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows local attackers to access sensitive information....

📅 2025-07-08
CVSS 4.0 Dossier →
Component: android

Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to manipulate broadcasting Auracast....

📅 2025-07-08
CVSS 6.2 Dossier →
Component: android

Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to stop broadcasting Auracast....

📅 2025-07-08
CVSS 6.2 Dossier →
Component: android

Improper privilege management in Bluetooth prior to SMR Jul-2025 Release 1 allows local attackers to enable Bluetooth....

📅 2025-07-08
CVSS 6.2 Dossier →
Component: android

Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025 Release 1 allows secondary users to access owner's sa...

📅 2025-07-08
CVSS 4.1 Dossier →
Component: wear_os

Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number....

📅 2025-07-08
CVSS 5.5 Dossier →
Page 12 of 62 (1,475 Total Records)