samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
Component: pay

Improper check or handling of exception conditions vulnerability in Samsung Pay (US only) prior to version 4.0.65 allows attacker to use NFC without u...

📅 2021-12-08
CVSS 2.0 Dossier →
Component: contacts

Insecure storage of device information in Contacts prior to version 12.7.05.24 allows attacker to get Samsung Account ID....

📅 2021-12-08
CVSS 4.0 Dossier →
Component: dialer

Insecure storage of device information in Samsung Dialer prior to version 12.7.05.24 allows attacker to get Samsung Account ID....

📅 2021-12-08
CVSS 4.0 Dossier →
Component: smart_capture

Insecure storage of sensitive information vulnerability in Smart Capture prior to version 4.8.02.10 allows attacker to access victim's captured images...

📅 2021-12-08
CVSS 5.3 Dossier →
Component: internet

Insecure caller check in sharevia deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to get current tab URL in Samsung Int...

📅 2021-12-08
CVSS 4.0 Dossier →
Component: internet

Insecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applicat...

📅 2021-12-08
CVSS 5.9 Dossier →
CVE-2021-42114 CRITICAL
Component: ddr4_sdram_firmware

Modern DRAM devices (PC-DDR4, LPDDR4X) are affected by a vulnerability in their internal Target Row Refresh (TRR) mitigation against Rowhammer attacks...

📅 2021-11-16
CVSS 9.0 Dossier →
Component: samsung_flow

A missing input validation in Samsung Flow Windows application prior to Version 4.8.5.0 allows attackers to overwrite abtraty file in the Windows know...

📅 2021-11-05
CVSS 5.9 Dossier →
Component: smartthings

Improper privilege management vulnerability in API Key used in SmartThings prior to 1.7.73.22 allows an attacker to abuse the API key without limitati...

📅 2021-11-05
CVSS 5.3 Dossier →
Component: samsung_flow

Improper authorization vulnerability in Samsung Flow mobile application prior to 4.8.03.5 allows Samsung Flow PC application connected with user devic...

📅 2021-11-05
CVSS 5.7 Dossier →
Component: health

Non-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via malicious content provider or lead to denial of service....

📅 2021-11-05
CVSS 4.0 Dossier →
Component: samsung_pass

Improper authentication in Samsung Pass prior to 3.0.02.4 allows to use app without authentication when lockscreen is unlocked....

📅 2021-11-05
CVSS 3.3 Dossier →
Component: group_sharing

Intent redirection vulnerability in Group Sharing prior to 10.8.03.2 allows attacker to access contact information....

📅 2021-11-05
CVSS 4.0 Dossier →
Component: galaxy_store

Intent redirection vulnerability in SamsungAccountSDKSigninActivity of Galaxy Store prior to version 4.5.32.4 allows attacker to access content provid...

📅 2021-10-06
CVSS 7.1 Dossier →
Component: notes

A possible buffer overflow vulnerability in maetd_eco_cb_mode of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows ...

📅 2021-10-06
CVSS 7.3 Dossier →
Component: notes

A possible buffer overflow vulnerability in maetd_cpy_slice of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows ar...

📅 2021-10-06
CVSS 7.3 Dossier →
Component: notes

A possible buffer overflow vulnerability in maetd_dec_slice of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows ar...

📅 2021-10-06
CVSS 7.3 Dossier →
Component: notes

A possible heap buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows arbitrary code ex...

📅 2021-10-06
CVSS 7.3 Dossier →
Component: notes

A possible buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows arbitrary code executi...

📅 2021-10-06
CVSS 4.0 Dossier →
Component: notes

Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows OOB read...

📅 2021-10-06
CVSS 4.0 Dossier →
Component: notes

Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows OOB read....

📅 2021-10-06
CVSS 7.3 Dossier →
Component: android

Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug l...

📅 2021-10-06
CVSS 3.3 Dossier →
Component: android

Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in ar...

📅 2021-10-06
CVSS 7.3 Dossier →
Component: internet

Improper scheme check vulnerability in Samsung Internet prior to version 15.0.2.47 allows attackers to perform Man-in-the-middle attack and obtain Sam...

📅 2021-09-09
CVSS 6.5 Dossier →
Page 49 of 62 (1,475 Total Records)