samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
Component: android

Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corru...

📅 2025-10-10
CVSS 4.0 Dossier →
Component: android

Out-of-bounds write under specific condition in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attacke...

📅 2025-10-10
CVSS 4.0 Dossier →
Component: android

Out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to write out-of-bounds...

📅 2025-10-10
CVSS 4.0 Dossier →
Component: android

Improper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local attackers to access data across multiple user profiles....

📅 2025-10-10
CVSS 7.1 Dossier →
Component: android

Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. User interaction is req...

📅 2025-10-10
CVSS 5.5 Dossier →
Component: android

Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to execute arbitrary code....

📅 2025-10-10
CVSS 6.7 Dossier →
Component: android

Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs....

📅 2025-10-10
CVSS 5.2 Dossier →
Component: android

Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app ...

📅 2025-10-10
CVSS 2.4 Dossier →
Component: wear_os

Insecure storage of sensitive information in Galaxy Watch prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information....

📅 2025-10-10
CVSS 4.0 Dossier →
Component: android

Out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write out-of-bounds memory....

📅 2025-10-10
CVSS 5.7 Dossier →
Component: android

Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code....

📅 2025-09-12
CVSS 8.8 Dossier →
Component: android

Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code....

📅 2025-09-12
CVSS 8.8 Dossier →
Component: good_lock

Improper export of component in GoodLock prior to version 2.2.04.95 allows local attackers to install arbitrary applications from Galaxy Store....

📅 2025-09-04
CVSS 7.7 Dossier →
Component: android

Insecure Storage of Sensitive Information in Secure Folder prior to Android 16 allows local attackers to access sensitive information....

📅 2025-09-03
CVSS 6.2 Dossier →
Component: sassistant

Improper verification of intent by ExternalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary informat...

📅 2025-09-03
CVSS 5.1 Dossier →
Component: sassistant

Improper verification of intent by SystemExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary...

📅 2025-09-03
CVSS 5.1 Dossier →
Component: sassistant

Improper verification of intent by SamsungExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerar...

📅 2025-09-03
CVSS 5.1 Dossier →
Component: notes

Improper access control in Samsung Notes prior to version 4.4.30.63 allows physical attackers to access data across multiple user profiles. User inter...

📅 2025-09-03
CVSS 4.1 Dossier →
Component: notes

Improper access control in Samsung Notes prior to version 4.4.30.63 allows local privileged attackers to access exported note files. User interaction ...

📅 2025-09-03
CVSS 5.0 Dossier →
Component: calendar

Improper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15 allows physical attackers to access ...

📅 2025-09-03
CVSS 4.6 Dossier →
Component: android

Out-of-bounds write in libsavsvc.so prior to SMR Sep-2025 Release 1 allows local attackers to potentially execute arbitrary code....

📅 2025-09-03
CVSS 4.0 Dossier →
Component: android

Improper access control in ContactProvider prior to SMR Sep-2025 Release 1 allows local attackers to access sensitive information....

📅 2025-09-03
CVSS 4.0 Dossier →
Component: android

Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions....

📅 2025-09-03
CVSS 5.9 Dossier →
Component: android

Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs....

📅 2025-09-03
CVSS 6.8 Dossier →
Page 9 of 62 (1,475 Total Records)