samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
Component: android

Improper access control vulnerability in multitasking framework prior to SMR May-2024 Release 1 allows physical attackers to access unlocked screen fo...

📅 2024-05-07
CVSS 2.4 Dossier →
Component: camera

Improper handling of insufficient privileges vulnerability in Samsung Camera prior to versions 12.1.0.31 in Android 12, 13.1.02.07 in Android 13, and ...

📅 2024-04-02
CVSS 5.9 Dossier →
Component: galaxy_themes

Improper verification of intent by broadcast receiver vulnerability in ThemeStore prior to 5.3.05.2 allows local attackers to write arbitrary files to...

📅 2024-04-02
CVSS 5.1 Dossier →
Component: smartthings

Improper verification of intent by broadcast receiver vulnerability in SmartThings prior to version 1.8.13.22 allows local attackers to access testing...

📅 2024-04-02
CVSS 5.9 Dossier →
Component: cloud

Improper access control vulnerability in Samsung Data Store prior to version 5.3.00.4 allows local attackers to launch arbitrary activity with Samsung...

📅 2024-04-02
CVSS 4.4 Dossier →
Component: samsung_pay

Use of Implicit Intent for Sensitive Communication in Samsung Pay prior to version 5.4.99 allows local attackers to access information of Samsung Pay....

📅 2024-04-02
CVSS 6.2 Dossier →
Component: android

Out-of-bound Write vulnerability in chunk parsing implementation of libsdffextractor prior to SMR Apr-2023 Release 1 allows local attackers to execute...

📅 2024-04-02
CVSS 7.3 Dossier →
Component: android

Improper Input Validation vulnerability in text parsing implementation of libsdffextractor prior to SMR Apr-2024 Release 1 allows local attackers to w...

📅 2024-04-02
CVSS 4.0 Dossier →
Component: android

Improper Access Control vulnerability in StorageManagerService prior to SMR Apr-2024 Release 1 allows local attackers to read sdcard information....

📅 2024-04-02
CVSS 4.0 Dossier →
Component: android

Out-of-bounds write vulnerability while decoding hcr of libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code....

📅 2024-04-02
CVSS 5.9 Dossier →
Component: android

Out-of-bounds write vulnerability while releasing memory in libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary co...

📅 2024-04-02
CVSS 8.4 Dossier →
Component: android

Out-of-bounds write vulnerability while parsing remaining codewords in libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute a...

📅 2024-04-02
CVSS 8.4 Dossier →
Component: android

Out-of-bound write vulnerability in command parsing implementation of libIfaaCa prior to SMR Apr-2024 Release 1 allows local privileged attackers to e...

📅 2024-04-02
CVSS 5.6 Dossier →
Component: android

Improper Input Validation vulnerability in handling apdu of libsec-ril prior to SMR Apr-2024 Release 1 allows local privileged attackers to write out-...

📅 2024-04-02
CVSS 4.2 Dossier →
Component: android

Use after free vulnerability in pub_crypto_recv_msg prior to SMR Mar-2024 Release 1 due to race condition allows local attackers with system privilege...

📅 2024-03-05
CVSS 4.1 Dossier →
Component: account

Improper Handling of Insufficient Privileges in Samsung Account prior to version 14.8.00.3 allows local attackers to access data....

📅 2024-03-05
CVSS 5.1 Dossier →
Component: voice_recorder

Improper access control in Samsung Voice Recorder prior to versions 21.5.16.01 in Android 12 and Android 13, 21.4.51.02 in Android 14 allows physical ...

📅 2024-03-05
CVSS 5.7 Dossier →
Component: voice_recorder

Improper access control in Samsung Voice Recorder prior to versions 21.5.16.01 in Android 12 and Android 13, 21.4.51.02 in Android 14 allows physical ...

📅 2024-03-05
CVSS 4.6 Dossier →
Component: internet

Improper validation vulnerability in Samsung Internet prior to version 24.0.3.2 allows local attackers to execute arbitrary code....

📅 2024-03-05
CVSS 6.8 Dossier →
Component: internet

Improper handling of granting permission for Trusted Web Activities in Samsung Internet prior to version 24.0.0.41 allows local attackers to grant per...

📅 2024-03-05
CVSS 5.3 Dossier →
Component: android

Out of bounds Read vulnerability in ssmis_get_frm in libsubextractor.so prior to SMR Mar-2024 Release 1 allows local attackers to read out of bounds m...

📅 2024-03-05
CVSS 3.3 Dossier →
Component: android

Improper access control vulnerability in CustomFrequencyManagerService prior to SMR Mar-2024 Release 1 allows local attackers to execute privileged be...

📅 2024-03-05
CVSS 4.0 Dossier →
Component: android

The sensitive information exposure vulnerability in WlanTest prior to SMR Mar-2024 Release 1 allows local attackers to access MAC address without prop...

📅 2024-03-05
CVSS 3.3 Dossier →
Component: android

Heap overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows local privileged attackers to execute arbitrary code....

📅 2024-03-05
CVSS 6.4 Dossier →
Page 28 of 62 (1,475 Total Records)