samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
Component: notes

Out-of-bounds read in applying binary of text content in Samsung Notes prior to version 4.4.29.23 allows attackers to read out-of-bounds memory....

📅 2025-05-07
CVSS 5.5 Dossier →
Component: flow

Improper verification of intent by broadcast receiver in Samsung Flow prior to version 4.9.17.6 allows local attackers to modify Samsung Flow configur...

📅 2025-05-07
CVSS 6.2 Dossier →
Component: flow

Improper input validation in Samsung Flow prior to version 4.9.17.6 allows local attackers to access data within Samsung Flow....

📅 2025-05-07
CVSS 5.5 Dossier →
Component: gallery

Improper input validation in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android ...

📅 2025-05-07
CVSS 5.5 Dossier →
Component: gallery

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14...

📅 2025-05-07
CVSS 7.2 Dossier →
Component: gallery

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14...

📅 2025-05-07
CVSS 5.1 Dossier →
Component: gallery

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14...

📅 2025-05-07
CVSS 4.6 Dossier →
Component: bixby

Improper handling of insufficient permission in Bixby wakeup prior to version 2.3.74.8 allows local attackers to access sensitive data....

📅 2025-05-07
CVSS 6.2 Dossier →
Component: android

Out-of-bounds write in parsing media files in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory....

📅 2025-05-07
CVSS 6.6 Dossier →
Component: android

Out-of-bounds write in memory initialization in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory....

📅 2025-05-07
CVSS 6.6 Dossier →
Component: android

Improper handling of insufficient permission in SpenGesture service prior to SMR May-2025 Release 1 allows local attackers to track the S Pen position...

📅 2025-05-07
CVSS 4.0 Dossier →
Component: android

Improper handling of insufficient permission or privileges in sepunion service prior to SMR May-2025 Release 1 allows local privileged attackers to ac...

📅 2025-05-07
CVSS 5.5 Dossier →
Component: android

Improper handling of insufficient permission in CocktailBarService prior to SMR May-2025 Release 1 allows local attackers to use the privileged api....

📅 2025-05-07
CVSS 4.0 Dossier →
Component: android

Use of implicit intent for sensitive communication in Wi-Fi P2P service prior to SMR May-2025 Release 1 allows local attackers to access sensitive inf...

📅 2025-05-07
CVSS 5.1 Dossier →
Component: android

Improper verification of intent by broadcast receiver in UnifiedWFC prior to SMR May-2025 Release 1 allows local attackers to manipulate VoWiFi relate...

📅 2025-05-07
CVSS 4.4 Dossier →
Component: android

Improper access control in SmartManagerCN prior to SMR May-2025 Release 1 allows local attackers to launch arbitrary activities with SmartManagerCN pr...

📅 2025-05-07
CVSS 7.3 Dossier →
Component: wear_os

Improper export of android application components in Settings in Galaxy Watch prior to SMR May-2025 Release 1 allows physical attackers to access deve...

📅 2025-05-07
CVSS 4.3 Dossier →
Component: android

Improper Export of Android Application Components in NotificationHistoryImageProvider prior to SMR May-2025 Release 1 allows local attackers to access...

📅 2025-05-07
CVSS 5.5 Dossier →
Component: android

Use of implicit intent for sensitive communication in EnrichedCall prior to SMR May-2025 Release 1 allows local attackers to access sensitive informat...

📅 2025-05-07
CVSS 5.5 Dossier →
Component: android

Improper access control in SmartManagerCN prior to SMR May-2025 Release 1 allows local attackers to launch activities within SmartManagerCN....

📅 2025-05-07
CVSS 5.1 Dossier →
Component: members

Path traversal vulnerability in Samsung Members prior to version 5.0.00.11 allows attackers to read and write arbitrary file with the privilege of Sam...

📅 2025-05-07
CVSS 5.1 Dossier →
Component: android

Out-of-bounds write in Keymaster trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to write out-of-bounds memory....

📅 2025-05-07
CVSS 6.7 Dossier →
Component: android

Improper access control in Mdecservice prior to SMR Apr-2025 Release 1 allows local attackers to access arbitrary files with system privilege....

📅 2025-04-09
CVSS 5.5 Dossier →
Component: galaxy_store

Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.90.7 allows local attackers to write arbitrar...

📅 2025-04-08
CVSS 5.1 Dossier →
Page 15 of 62 (1,475 Total Records)