samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
Component: magician

An issue was discovered in the installer in Samsung Magician 8.1.0 on Windows. An attacker can create arbitrary folders in the system permission direc...

📅 2024-12-03
CVSS 2.8 Dossier →
Component: quick_share

Path traversal in Quick Share Agent prior to version 3.5.14.47 in Android 12, 3.5.19.41 in Android 13, and 3.5.19.42 in Android 14 allows adjacent att...

📅 2024-12-03
CVSS 4.3 Dossier →
Component: smart_touch_call

Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities. User i...

📅 2024-12-03
CVSS 2.0 Dossier →
Component: smartthings

Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to get sensitive information....

📅 2024-12-03
CVSS 4.0 Dossier →
Component: android

Out-of-bound write in libsaped.so prior to SMR Dec-2024 Release 1 allows remote attackers to execute arbitrary code....

📅 2024-12-03
CVSS 8.1 Dossier →
Component: android

Authentication Bypass Using an Alternate Path in Dex Mode prior to SMR Dec-2024 Release 1 allows physical attackers to temporarily access to recent ap...

📅 2024-12-03
CVSS 2.4 Dossier →
Component: android

Improper Verification of Cryptographic Signature in SmartSwitch prior to SMR Dec-2024 Release 1 allows local attackers to install malicious applicatio...

📅 2024-12-03
CVSS 7.1 Dossier →
Component: android

Path Traversal in ThemeCenter prior to SMR Dec-2024 Release 1 allows physical attackers to copy apk files to arbitrary path with ThemeCenter privilege...

📅 2024-12-03
CVSS 4.3 Dossier →
Component: android

Out-of-bounds write in libswmfextractor.so prior to SMR Dec-2024 Release 1 allows local attackers to execute arbitrary code....

📅 2024-12-03
CVSS 5.9 Dossier →
Component: exynos_modem_5123_firmware

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 138...

📅 2024-12-02
CVSS 8.1 Dossier →
Component: exynos_2100_firmware

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, Modem 5123, and Mode...

📅 2024-12-02
CVSS 7.0 Dossier →
Component: galaxy_s24_firmware

Out-of-bounds write in Battery Full Capacity node prior to Firmware update Sep-2024 Release on Galaxy S24 allows local attackers to write out-of-bound...

📅 2024-11-06
CVSS 6.4 Dossier →
Component: galaxy_s24_firmware

Out-of-bounds write in usb driver prior to Firmware update Sep-2024 Release on Galaxy S24 allows local attackers to write out-of-bounds memory. System...

📅 2024-11-06
CVSS 6.4 Dossier →
Component: flow

Improper access control in Samsung Flow prior to version 4.9.15.7 allows physical attackers to access data across multiple user profiles....

📅 2024-11-06
CVSS 4.6 Dossier →
Component: blockchain_keystore

Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to modify transaction. Root privile...

📅 2024-11-06
CVSS 6.7 Dossier →
Component: pass

Improper authentication in Private Info in Samsung Pass in prior to version 4.4.04.7 allows physical attackers to access sensitive information in a sp...

📅 2024-11-06
CVSS 5.3 Dossier →
Component: video_player

Improper Access Control in Samsung Video Player prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.3.41.230 in Android 14 allows ...

📅 2024-11-06
CVSS 5.5 Dossier →
Component: voice_recorder

Improper access control in Samsung Voice Recorder prior to version 21.5.40.37 allows physical attackers to access recording files on the lock screen....

📅 2024-11-06
CVSS 4.6 Dossier →
Component: android

Improper input validation in Dressroom prior to SMR Nov-2024 Release 1 allow physical attackers to access data across multiple user profiles....

📅 2024-11-06
CVSS 4.6 Dossier →
Component: android

Improper input validation in Settings Suggestions prior to SMR Nov-2024 Release 1 allows local attackers to launch privileged activities....

📅 2024-11-06
CVSS 5.1 Dossier →
Component: android

Improper authorization in Settings prior to SMR Nov-2024 Release 1 allows physical attackers to access stored WiFi password in Maintenance Mode....

📅 2024-11-06
CVSS 2.4 Dossier →
Component: android

Use of implicit intent for sensitive communication in WlanTest prior to SMR Nov-2024 Release 1 allows local attackers to get sensitive information....

📅 2024-11-06
CVSS 4.0 Dossier →
Component: android

Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone privilege....

📅 2024-11-06
CVSS 4.0 Dossier →
Component: android

Out-of-bounds write in libsapeextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption....

📅 2024-11-06
CVSS 5.9 Dossier →
Page 19 of 62 (1,475 Total Records)