samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
CVE-2017-18681 CRITICAL
Component: galaxy_s5_firmware

An issue was discovered on Samsung Galaxy S5 mobile devices with software through 2016-12-20 (Qualcomm AP chipsets). There are multiple buffer overflo...

📅 2020-04-07
CVSS 9.8 Dossier →
Component: s5_firmware

An issue was discovered on Samsung mobile devices with S3(KK), Note2(KK), S4(L), Note3(L), and S5(L) software. An attacker can rewrite the IMEI by fla...

📅 2020-04-07
CVSS 4.3 Dossier →
CVE-2019-20566 CRITICAL
Component: exynos_smp1300

An issue was discovered on Samsung mobile devices with any (before September 2019 for SMP1300 Exynos modem chipsets) software. Attackers can trigger s...

📅 2020-03-24
CVSS 9.8 Dossier →
Component: note9

An issue was discovered on Samsung mobile devices with any (before October 2019 for S9 or Note9) software. Attackers can manipulate the IMEI. The Sams...

📅 2020-03-24
CVSS 7.5 Dossier →
CVE-2020-10835 CRITICAL
Component: exynos

An issue was discovered on Samsung mobile devices with any (before February 2020 for Exynos modem chipsets) software. There is a buffer overflow in ba...

📅 2020-03-24
CVSS 9.8 Dossier →
CVE-2015-7890 MEDIUM
Component: galaxy_s6_edge_firmware

Multiple buffer overflows in the esa_write function in /dev/seirenin the Exynos Seiren Audio driver, as used in Samsung S6 Edge, allow local users to ...

📅 2020-02-12
CVSS 5.5 Dossier →
CVE-2019-6744 MEDIUM
Component: knox

This vulnerability allows local attackers to disclose sensitive information on affected installations of Samsung Knox 1.2.02.39 on Samsung Galaxy S9 b...

📅 2020-02-10
CVSS 4.3 Dossier →
CVE-2019-20451 CRITICAL
Component: prismview_player_11

The HTTP API in Prismview System 9 11.10.17.00 and Prismview Player 11 13.09.1100 allows remote code execution by uploading RebootSystem.lnk and reque...

📅 2020-02-10
CVSS 9.8 Dossier →
CVE-2018-16272 CRITICAL
Component: galaxy_gear_firmware

The wpa_supplicant system service in Samsung Galaxy Gear series allows an unprivileged process to fully control the Wi-Fi interface, due to the lack o...

📅 2020-01-22
CVSS 9.8 Dossier →
Component: galaxy_gear_firmware

The wemail_consumer_service (from the built-in application wemail) in Samsung Galaxy Gear series allows an unprivileged process to manipulate a user's...

📅 2020-01-22
CVSS 6.5 Dossier →
Component: galaxy_gear_firmware

Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unprivileged proc...

📅 2020-01-22
CVSS 7.5 Dossier →
Component: galaxy_gear_firmware

The wnoti system service in Samsung Galaxy Gear series allows an unprivileged process to take over the internal notification message data, due to impr...

📅 2020-01-22
CVSS 7.5 Dossier →
Component: kies

Samsung Kies before 2.5.0.12094_27_11 has registry modification....

📅 2020-01-09
CVSS 7.5 Dossier →
Component: kies

Samsung Kies before 2.5.0.12094_27_11 has arbitrary directory modification....

📅 2020-01-09
CVSS 7.5 Dossier →
Component: kies

Samsung Kies before 2.5.0.12094_27_11 has arbitrary file modification....

📅 2020-01-09
CVSS 7.5 Dossier →
CVE-2012-3807 CRITICAL
Component: kies

Samsung Kies before 2.5.0.12094_27_11 has arbitrary file execution....

📅 2020-01-09
CVSS 9.8 Dossier →
Component: kies

Samsung Kies before 2.5.0.12094_27_11 contains a NULL pointer dereference vulnerability which could allow remote attackers to perform a denial of serv...

📅 2020-01-09
CVSS 7.5 Dossier →
CVE-2013-4764 MEDIUM
Component: galaxy_s3_firmware

Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbitrary destinations without permi...

📅 2019-12-27
CVSS 4.3 Dossier →
CVE-2013-4763 MEDIUM
Component: galaxy_s3_firmware

Samsung Galaxy S3/S4 exposes an unprotected component allowing arbitrary SMS text messages without requesting permission....

📅 2019-12-27
CVSS 4.6 Dossier →
Component: m2m1shot_driver

Stack-based buffer overflow in the m2m1shot_compat_ioctl32 function in the Samsung m2m1shot driver framework, as used in Samsung S6 Edge, allows local...

📅 2019-12-09
CVSS 7.8 Dossier →
Component: galaxy_j7_pro_firmware

The Samsung J7 Pro Android device with a build fingerprint of samsung/j7y17lteubm/j7y17lte:8.1.0/M1AJQ/J730GMUBS6BSC1:user/release-keys contains a pre...

📅 2019-11-14
CVSS 7.8 Dossier →
Component: galaxy_j7_pro_firmware

The Samsung J7 Pro Android device with a build fingerprint of samsung/j7y17lteub/j7y17lte:8.1.0/M1AJQ/J730GUBS6BSC1:user/release-keys contains a pre-i...

📅 2019-11-14
CVSS 7.8 Dossier →
Component: galaxy_j7_prime_firmware

The Samsung j7popeltemtr Android device with a build fingerprint of samsung/j7popeltemtr/j7popeltemtr:8.1.0/M1AJQ/J727T1UVS5BSC2:user/release-keys con...

📅 2019-11-14
CVSS 7.8 Dossier →
Component: galaxy_j7_duo_firmware

The Samsung J7 Duo Android device with a build fingerprint of samsung/j7duolteub/j7duolte:8.0.0/R16NW/J720MUBS3ASB2:user/release-keys contains a pre-i...

📅 2019-11-14
CVSS 7.8 Dossier →
Page 53 of 62 (1,475 Total Records)