Filtered by vendor Samsung
Subscriptions
Filtered by product Android
Subscriptions
Total
327 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2023-21449 | 1 Samsung | 1 Android | 2025-02-26 | 4 Medium |
Improper access control vulnerability in Call application prior to SMR Mar-2023 Release 1 allows local attackers to access sensitive information without proper permission. | ||||
CVE-2023-21452 | 1 Samsung | 1 Android | 2025-02-26 | 3.3 Low |
Improper usage of implicit intent in Bluetooth prior to SMR Mar-2023 Release 1 allows attacker to get MAC address of connected device. | ||||
CVE-2023-21453 | 1 Samsung | 1 Android | 2025-02-26 | 6 Medium |
Improper input validation vulnerability in SoftSim TA prior to SMR Mar-2023 Release 1 allows local attackers access to protected data. | ||||
CVE-2023-21454 | 1 Samsung | 1 Android | 2025-02-26 | 2.4 Low |
Improper authorization in Samsung Keyboard prior to SMR Mar-2023 Release 1 allows physical attacker to access users text history on the lockscreen. | ||||
CVE-2023-21456 | 1 Samsung | 1 Android | 2025-02-26 | 9 Critical |
Path traversal vulnerability in Galaxy Themes Service prior to SMR Mar-2023 Release 1 allows attacker to access arbitrary file with system uid. | ||||
CVE-2023-21458 | 1 Samsung | 1 Android | 2025-02-26 | 6.2 Medium |
Improper privilege management vulnerability in PhoneStatusBarPolicy in System UI prior to SMR Mar-2023 Release 1 allows attacker to turn off Do not disturb via unprotected intent. | ||||
CVE-2023-21459 | 1 Samsung | 2 Android, Exynos 2100 | 2025-02-26 | 5 Medium |
Use after free vulnerability in decon driver prior to SMR Mar-2023 Release 1 allows attackers to cause memory access fault. | ||||
CVE-2023-21460 | 1 Samsung | 1 Android | 2025-02-26 | 4.4 Medium |
Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting. | ||||
CVE-2023-21457 | 1 Samsung | 1 Android | 2025-02-26 | 4.1 Medium |
Improper access control vulnerability in Bluetooth prior to SMR Mar-2023 Release 1 allows attackers to send file via Bluetooth without related permission. | ||||
CVE-2021-25337 | 1 Samsung | 1 Android | 2025-02-14 | 4.4 Medium |
Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files. | ||||
CVE-2021-25369 | 1 Samsung | 1 Android | 2025-02-14 | 6.2 Medium |
An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace. | ||||
CVE-2021-25370 | 1 Samsung | 1 Android | 2025-02-14 | 6.1 Medium |
An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic. | ||||
CVE-2021-25371 | 1 Samsung | 4 Android, Exynos 2100, Exynos 980 and 1 more | 2025-02-14 | 6.1 Medium |
A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP. | ||||
CVE-2021-25372 | 1 Samsung | 4 Android, Exynos 2100, Exynos 980 and 1 more | 2025-02-14 | 6.1 Medium |
An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access. | ||||
CVE-2021-25394 | 1 Samsung | 1 Android | 2025-02-14 | 6.4 Medium |
A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised. | ||||
CVE-2021-25395 | 1 Samsung | 1 Android | 2025-02-14 | 6.4 Medium |
A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised. | ||||
CVE-2021-25487 | 1 Samsung | 1 Android | 2025-02-14 | 7.3 High |
Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer. | ||||
CVE-2021-25489 | 1 Samsung | 1 Android | 2025-02-14 | 3.3 Low |
Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic. | ||||
CVE-2025-20890 | 1 Samsung | 1 Android | 2025-02-12 | 7 High |
Out-of-bounds write in decoding frame buffer in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability. | ||||
CVE-2025-20891 | 1 Samsung | 1 Android | 2025-02-12 | 5.3 Medium |
Out-of-bounds read in decoding malformed bitstream of video thumbnails in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitrary memory. User interaction is required for triggering this vulnerability. |