samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
Component: android

Use After Free in PROCA driver prior to SMR Jan-2026 Release 1 allows local attackers to potentially execute arbitrary code....

📅 2026-01-09
CVSS 7.8 Dossier →
Component: android

Improper access control in SLocation prior to SMR Jan-2026 Release 1 allows local attackers to execute the privileged APIs....

📅 2026-01-09
CVSS 7.8 Dossier →
Component: android

Improper input validation in SecSettings prior to SMR Jan-2026 Release 1 allows local attacker to access file with system privilege. User interaction ...

📅 2026-01-09
CVSS 5.5 Dossier →
Component: android

Use after free in DualDAR prior to SMR Jan-2026 Release 1 allows local privileged attackers to execute arbitrary code....

📅 2026-01-09
CVSS 6.7 Dossier →
Component: exynos_1380_firmware

An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580. Incorrect Handling of the NL80211 vendor command leads to a buf...

📅 2026-01-05
CVSS 8.4 Dossier →
Component: exynos_2500_firmware

An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. A race condition i...

📅 2026-01-05
CVSS 5.9 Dossier →
Component: exynos_1330_firmware

An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. An invalid kernel ...

📅 2026-01-05
CVSS 6.2 Dossier →
Component: exynos_1330_firmware

An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. A race condition i...

📅 2026-01-05
CVSS 5.1 Dossier →
Component: exynos_1380_firmware

An issue was discovered in the WiFi driver in Samsung Mobile Processor Exynos 1380, 1480, 2400, 1580. Mishandling of an NL80211 vendor command leads t...

📅 2026-01-05
CVSS 8.4 Dossier →
Component: exynos_1080_firmware

An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2400, 1580, 9110, W920, W930, Mod...

📅 2026-01-05
CVSS 7.5 Dossier →
CVE-2025-27807 CRITICAL
Component: exynos_990_firmware

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 240...

📅 2026-01-05
CVSS 9.1 Dossier →
Component: magician

An issue was discovered in Samsung Magician 6.3.0 through 8.3.2 on Windows. The installer creates a temporary folder with weak permissions during inst...

📅 2026-01-05
CVSS 7.8 Dossier →
Component: exynos_1330_firmware

An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, and 2500. Improper valid...

📅 2026-01-05
CVSS 7.1 Dossier →
Component: exynos_1280_firmware

An issue was discovered in Camera in Samsung Mobile Processor Exynos 1280 and 2200. Unnecessary registration of a hardware IP address in the Camera de...

📅 2025-12-03
CVSS 7.5 Dossier →
Component: exynos_1280_firmware

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 158...

📅 2025-12-03
CVSS 5.3 Dossier →
Component: smart_touch_call

Improper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1.1 allows remote attackers to access sensitive info...

📅 2025-12-02
CVSS 4.5 Dossier →
Component: account

Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary activity with Samsung Account privilege...

📅 2025-12-02
CVSS 4.0 Dossier →
Component: account

Improper input validation in Samsung Account prior to version 15.5.01.1 allows local attacker to execute arbitrary script....

📅 2025-12-02
CVSS 4.0 Dossier →
Component: internet

Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script....

📅 2025-12-02
CVSS 5.5 Dossier →
Component: galaxy_store

Improper export of android application components in Galaxy Store for Galaxy Watch prior to version 1.0.06.29 allows local attacker to install arbitra...

📅 2025-12-02
CVSS 5.9 Dossier →
Component: motionphoto

Improper access control in MPLocalService of MotionPhoto prior to version 4.1.51 allows local attackers to start privileged service....

📅 2025-12-02
CVSS 7.3 Dossier →
Component: motionphoto

Improper access control in MPRemoteService of MotionPhoto prior to version 4.1.51 allows local attackers to start privileged service....

📅 2025-12-02
CVSS 7.3 Dossier →
Component: android

Heap-based buffer overflow in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory....

📅 2025-12-02
CVSS 4.3 Dossier →
Component: android

Out-of-bounds read in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory....

📅 2025-12-02
CVSS 4.3 Dossier →
Page 6 of 62 (1,475 Total Records)