Android vulnerabilities
81 known vulnerabilities in Android from Samsung. 73 are rated high or critical, and 12 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Samsung Mobile Devices: Heap-based Buffer Overflow
Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
- 9.8 Critical severity
Samsung Mobile Devices: Heap-based Buffer Overflow
Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
- 7.8 High severity
Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026…
Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
- 7.8 High severity
Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR…
Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
- 7.8 High severity
Samsung Mobile Devices: Incorrect Conversion between Numeric Types
Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
- 7.1 High severity
Samsung Mobile Devices: Improper Export of Android Application Components
Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.
- 7.8 High severity
Samsung Mobile Devices: Incorrect Authorization
Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. User interaction is required for triggering this vulnerability.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds write under specific condition in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to write out-of-bounds memory.
- 9.8 Critical severity
Samsung Mobile Devices Out-of-Bounds Write Exploited
Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.
- 9.8 Critical severity
Samsung Mobile Devices Out-of-Bounds Write Exploited
Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.
- 7.8 High severity
libsavsvc.so: Out-of-bounds Write
Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 allows local attackers to write out-of-bounds memory.
- 7.1 High severity
Samsung Mobile Devices: Out-of-bounds Read
Out-of-bounds read in enrollment with cdsp frame secfr trustlet prior to SMR Apr-2025 Release 1 allows local privileged attackers to read out-of-bounds memory.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds write in decoding frame buffer in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds write in handling the block size for smp4vtd in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds write in accessing uninitialized memory for svc1td in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds write in accessing buffer storing the decoded video frames in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability.
- 7.8 High severity
Samsung Mobile Devices: Improper Verification of Cryptographic Signature
Improper Verification of Cryptographic Signature in SmartSwitch prior to SMR Dec-2024 Release 1 allows local attackers to install malicious applications.
- 7.3 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds write in parsing subtitle file in libsubextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption. User interaction is required for triggering this vulnerability.
- 8.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds write in parsing h.263+ format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.
- 8.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds write in parsing h.263 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.
- 8.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds write in parsing h.265 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.
- 8.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds write in parsing h.264 format in a specific mode in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.
- 8.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds write in parsing h.264 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.
- 7.1 High severity
Samsung Mobile Devices: Improper Handling of Exceptional Conditions
Improper handling of exceptional conditions in ThemeCenter prior to SMR Sep-2024 Release 1 allows local attackers to delete non-preloaded applications.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local attackers to write out-of-bounds memory.
- 7.8 High severity
Samsung Mobile Devices: Improper Verification of Cryptographic Signature
Improper verification of signature in FilterProvider prior to SMR Jul-2024 Release 1 allows local attackers to execute privileged behaviors. User interaction is required for triggering this vulnerability.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Heap out-of-bound write vulnerability in parsing grid image in libsavscmn.so prior to SMR June-2024 Release 1 allows local attackers to execute arbitrary code.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Heap out-of-bound write vulnerability in parsing grid image header in libsavscmn.so prior to SMR Jun-2024 Release 1 allows local attackers to execute arbitrary code.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Improper Input Validation vulnerability in text parsing implementation of libsdffextractor prior to SMR Apr-2024 Release 1 allows local attackers to write out-of-bounds memory.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds write vulnerability while releasing memory in libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds write vulnerability while parsing remaining codewords in libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code.
- 7.1 High severity
Samsung Mobile Devices: Out-of-bounds Write
Improper input validation in IpcTxSndSetLoopbackCtrl in libsec-ril prior to SMR Sep-2023 Release 1 allows local attackers to write out-of-bounds memory.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds Write vulnerabilities in svc1td_vld_plh_ap of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds Write vulnerabilities in svc1td_vld_elh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds Write vulnerabilities in svc1td_vld_slh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.
- 7.8 High severity
Samsung Mobile Devices: Integer Overflow or Wraparound
Integer overflow vulnerability in landmarkCopyImageToNative of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow.
- 7.8 High severity
Samsung Mobile Devices: Integer Overflow or Wraparound
Integer overflow vulnerability in detectionFindFaceSupportMultiInstance of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Read
An improper input validation in saped_rec_silence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.