Samsung Mobile Devices vulnerabilities
136 known vulnerabilities in Samsung Mobile Devices from Samsung. 128 are rated high or critical, and 13 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
Samsung Mobile Devices: Integer Overflow or Wraparound
Integer overflow vulnerability in detectionFindFaceSupportMultiInstance of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Read
An improper input validation in saped_rec_silence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Read
An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.
- 7.5 High severity
Samsung Mobile Devices: Improper Certificate Validation
Improper Certificate Validation in FotaAgent prior to SMR Nov-2023 Release1 allows remote attacker to intercept the network traffic including Firmware information.
- 7.1 High severity
Samsung Mobile Devices: Improper Authentication
Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass restrictions on starting activities from the background.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Stack-based Buffer Overflow in vulnerability HDCP trustlet prior to SMR Oct-2023 Release 1 allows local privileged attackers to perform code execution.
- 9.8 Critical severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds write vulnerability in parser_hvcC function of libsimba library prior to SMR Aug-2023 Release 1 allows code execution by remote attackers.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds Write in DoOemFactorySendFactoryBypassCommand of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds Write in BuildOemEmbmsGetSigStrengthResponse of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds Write in DoOemFactorySendFactoryTestResult of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacker to execute arbitrary code.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Improper input validation vulnerability in DoOemImeiSetPreconfig in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds write.
- 7.8 High severity
Improper input validation vulnerability in OemPersonalizationSetLock in libsec-ril prior to…
Improper input validation vulnerability in OemPersonalizationSetLock in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds write.
- 7.8 High severity
Improper input validation vulnerability in EnhancedAttestationResult prior to SMR Jul-2023…
Improper input validation vulnerability in EnhancedAttestationResult prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out of bounds read and write in enableTspDevice of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out of bounds read and write in callrunTspCmdNoRead of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out of bounds read and write in callgetTspsysfs of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out of bounds read and write in callrunTspCmd of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.
- 7.1 High severity
Samsung Mobile Devices: Missing Authentication for Critical Functionality
Missing authentication vulnerability in Galaxy Themes Service prior to SMR Jul-2023 Release 1 allows local attackers to delete arbitrary non-preloaded applications.
- 9.8 Critical severity
Samsung Mobile Devices: Buffer Copy without Checking Size of Input
Potential buffer overflow vulnerability in mm_Plmncoordination.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause invalid memory access.
- 9.8 Critical severity
Samsung Mobile Devices: Buffer Copy without Checking Size of Input
Potential buffer overflow vulnerability in mm_LteInterRatManagement.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause invalid memory access.
- 7.8 High severity
Improper input validation vulnerability in FactoryTest application prior to SMR May-2023…
Improper input validation vulnerability in FactoryTest application prior to SMR May-2023 Release 1 allows local attackers to get privilege escalation via debugging commands.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds write vulnerability in TA_Communication_mpos_encrypt_pin in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to execute arbitrary code.
- 7.8 High severity
Improper input validation vulnerability in setPartnerTAInfo in mPOS TUI trustlet prior to SMR…
Improper input validation vulnerability in setPartnerTAInfo in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to overwrite the trustlet memory.
- 7.8 High severity
Samsung Mobile Devices: Use of Externally-Controlled Format String
Use of externally-controlled format string vulnerability in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the memory address.
- 9.8 Critical severity
Samsung Mobile Devices: Buffer Copy without Checking Size of Input
Potential buffer overflow vulnerability in auth api in mm_Authentication.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause invalid memory access.
- 4.4 Medium severity
Samsung Mobile Devices Insertion of Sensitive Information Into Log File Exploited
Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.
- 7.8 High severity
Samsung Mobile Devices: Improper Access Control
Improper access control vulnerability in ThemeManager prior to SMR May-2023 Release 1 allows local attackers to write arbitrary files with system privilege.
- 7.8 High severity
Samsung Mobile Devices: Improper Authentication
Improper access control vulnerability in AppLock prior to SMR May-2023 Release 1 allows local attackers without proper permission to execute a privileged operation.
- 8.1 High severity
Samsung Mobile Devices: Improper Access Control
Improper access control vulnerability in Bluetooth prior to SMR Mar-2023 Release 1 allows attackers to send file via Bluetooth without related permission.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Read
An out-of-bound read vulnerability in mapToBuffer function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR JAN-2023 Release 1 allows attacker to cause memory access fault.
- 7.8 High severity
Samsung Mobile Devices: Improper Privilege Management
Improper Handling of Insufficient Permissions or Privileges vulnerability in KnoxCustomManagerService prior to SMR Jan-2023 Release 1 allows attacker to access device SIM PIN.
- 7.5 High severity
Samsung Mobile Devices: Improper Authentication
An improper implementation logic in Secure Folder prior to SMR Jan-2023 Release 1 allows the Secure Folder container remain unlocked under certain condition.
- 7.4 High severity
Samsung Mobile Devices: Time-of-check Time-of-use (TOCTOU) Race Condition
TOCTOU vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attacker to perform Out-Of-Bounds Write.
- 7.8 High severity
Samsung Mobile Devices: Integer Overflow or Wraparound
Integer overflow vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attacker to perform Out-Of-Bounds Write.
- 7.5 High severity
Samsung Mobile Devices: Improper Authorization
Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Heap overflow vulnerability in sflacf_fal_bytes_peek function in libsmat.so library prior to SMR Nov-2022 Release 1 allows local attacker to execute arbitrary code.
- 9.1 Critical severity
Samsung Mobile Devices: Out-of-bounds Read
Improper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR Sep-2022 Release allows remote attacker to read out of bounds memory.
- 7.8 High severity
Improper input validation vulnerability in DualOutFocusViewer prior to SMR Nov-2022 Release 1…
Improper input validation vulnerability in DualOutFocusViewer prior to SMR Nov-2022 Release 1 allows local attacker to perform an arbitrary code execution.