Samsung Mobile Devices vulnerabilities
136 known vulnerabilities in Samsung Mobile Devices from Samsung. 128 are rated high or critical, and 13 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Samsung Mobile Devices: Improper Authorization
Improper authorization in Dynamic Lockscreen prior to SMR Sep-2022 Release 1 in Android R(11) and 3.3.03.66 in Android S(12) allows unauthorized use of javascript interface api.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
A heap-based overflow vulnerability in makeContactAGIF in libagifencoder.quram.so library prior to SMR Oct-2022 Release 1 allows attacker to perform code execution.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
A heap-based overflow vulnerability in HWR::EngineCJK::Impl::Construct() in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
A heap-based overflow vulnerability in LoadEnvironment function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc() function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.
- 7.8 High severity
Samsung Mobile Devices: Use After Free
Use after free vulnerability in sdp_mm_set_process_sensitive function of sdpmm driver prior to SMR Sep-2022 Release 1 allows attackers to perform malicious actions.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
A heap-based overflow vulnerability in ConstructDictionary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
A heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
A heap-based overflow vulnerability in HWR::EngJudgeModel::Construct() in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
A heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
A heap-based overflow vulnerability in prepareRecogLibrary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
A heap-based overflow vulnerability in PrepareRecogLibrary_Part function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.
- 7.1 High severity
Samsung Mobile Devices: Improper Authentication
Improper access control vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows local attackers to scan and connect to PC by unprotected binder call.
- 7.8 High severity
Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows…
Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of Finder.
- 7.8 High severity
Samsung Mobile Devices: Improper Authentication
Improper authentication vulnerability in AppLock prior to SMR Jul-2022 Release 1 allows attacker to bypass password confirm activity by hijacking the implicit intent.
- 7.8 High severity
Implicit Intent hijacking vulnerability in AppLinker prior to SMR Jul-2022 Release 1 allow…
Implicit Intent hijacking vulnerability in AppLinker prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of AppLinker.
- 7.8 High severity
Unprotected component vulnerability in DeviceSearchTrampoline in SecSettingsIntelligence prior…
Unprotected component vulnerability in DeviceSearchTrampoline in SecSettingsIntelligence prior to SMR Jun-2022 Release 1 allows local attackers to launch activities of SecSettingsIntelligence.
- 9.8 Critical severity
Samsung Mobile Devices: Improper Authorization
Implicit Intent hijacking vulnerability in Samsung Account prior to SMR Jun-2022 Release 1 allows attackers to bypass user confirmation of Samsung Account.
- 7.1 High severity
Improper validation of removing package name in Galaxy Themes prior to SMR May-2022 Release 1…
Improper validation of removing package name in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to uninstall arbitrary packages without permission. The patch adds proper validation logic for removing package name.
- 7.8 High severity
Samsung Mobile Devices: Improper Limitation of a Pathname to a Restricted Directory
Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1 allow local attackers to access arbitrary system files without a proper permission. The patch adds proper validation logic t
- 7.0 High severity
Samsung Mobile Devices: Use After Free
Use after free vulnerability in dsp_context_unload_graph function of DSP driver prior to SMR Apr-2022 Release 1 allows attackers to perform malicious actions.
- 7.1 High severity
Samsung Mobile Devices: Out-of-bounds Read
Improper size check in sapefd_parse_meta_HEADER function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file.
- 7.1 High severity
Samsung Mobile Devices: Out-of-bounds Read
Improper size check of in sapefd_parse_meta_DESCRIPTION function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file
- 7.1 High severity
Samsung Mobile Devices: Out-of-bounds Read
Improper size check in sapefd_parse_meta_HEADER_old function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file.
- 7.2 High severity
Samsung Mobile Devices: Out-of-bounds Write
Improper input validation vulnerability in parser_iloc and sheifd_find_itemIndexin fuctions of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by privileged attacker.
- 7.2 High severity
Samsung Mobile Devices: Out-of-bounds Write
Improper input validation vulnerability in parser_infe and sheifd_find_itemIndexin fuctions of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by privileged attackers.
- 9.8 Critical severity
Samsung Mobile Devices: Out-of-bounds Write
Heap-based buffer overflow vulnerability in parser_ipma function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attackers.
- 9.8 Critical severity
Samsung Mobile Devices: Out-of-bounds Write
Heap-based buffer overflow vulnerability in sheifd_get_info_image function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.
- 9.8 Critical severity
Samsung Mobile Devices: Out-of-bounds Write
Heap-based buffer overflow vulnerability in parser_single_iref function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.
- 9.8 Critical severity
Samsung Mobile Devices: Out-of-bounds Write
Heap-based buffer overflow vulnerability in parser_infe function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.
- 9.8 Critical severity
Samsung Mobile Devices: Out-of-bounds Write
Heap-based buffer overflow vulnerability in parser_iloc function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.
- 9.8 Critical severity
Samsung Mobile Devices: NULL Pointer Dereference
Null pointer dereference vulnerability in parser_hvcC function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attackers.
- 9.1 Critical severity
Samsung Mobile Devices: NULL Pointer Dereference
Null pointer dereference vulnerability in parser_infe function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds read by remote attackers.
- 9.8 Critical severity
Samsung Mobile Devices: Out-of-bounds Write
Heap-based buffer overflow vulnerability in sheifd_create function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attackers.
- 9.8 Critical severity
Samsung Mobile Devices: NULL Pointer Dereference
Null pointer dereference vulnerability in parser_unknown_property function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker.
- 9.8 Critical severity
Samsung Mobile Devices: NULL Pointer Dereference
Null pointer dereference vulnerability in parser_ispe function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker.
- 9.8 Critical severity
Samsung Mobile Devices: NULL Pointer Dereference
Null pointer dereference vulnerability in parser_colr function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker.
- 9.8 Critical severity
Samsung Mobile Devices: NULL Pointer Dereference
Null pointer dereference vulnerability in parser_auxC function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker.
- 9.8 Critical severity
Samsung Mobile Devices: NULL Pointer Dereference
Null pointer dereference vulnerability in parser_irot function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker.