Samsung Mobile Devices vulnerabilities
136 known vulnerabilities in Samsung Mobile Devices from Samsung. 128 are rated high or critical, and 13 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
Samsung Mobile Devices: Incorrect Default Permissions
PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.
- 7.8 High severity
Samsung Mobile Devices: Incorrect Default Permissions
PendingIntent hijacking vulnerability in Wearable Manager Installer prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.
- 7.8 High severity
Samsung Mobile Devices: Improper Privilege Management
Improper access control vulnerability in dynamic receiver in ApkInstaller prior to SMR MAR-2022 Release allows unauthorized attackers to execute arbitrary activity without a proper permission
- 7.1 High severity
PendingIntent hijacking vulnerability in KnoxPrivacyNoticeReceiver prior to SMR Feb-2022…
PendingIntent hijacking vulnerability in KnoxPrivacyNoticeReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission via implicit Intent.
- 9.8 Critical severity
Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers…
Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with fake base station.
- 7.8 High severity
Samsung Mobile Devices Use-After-Free Exploited
An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.
- 7.1 High severity
Improper sanitization of incoming intent in Dressroom prior to SMR Jan-2022 Release 1 allows…
Improper sanitization of incoming intent in Dressroom prior to SMR Jan-2022 Release 1 allows local attackers to read and write arbitrary files without permission.
- 5.5 Medium severity
Samsung Mobile Devices Improper Input Validation Exploited
Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic.
- 7.8 High severity
Samsung Mobile Devices Out-of-Bounds Read Exploited
Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer.
- 6.4 Medium severity
Samsung Mobile Devices Race Condition Exploited
A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.
- 6.4 Medium severity
Samsung Mobile Devices Race Condition Exploited
A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised.
- 6.7 Medium severity
Samsung Mobile Devices Improper Boundary Check Exploited
An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.
- 6.7 Medium severity
Samsung Mobile Devices Unspecified Exploited
A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.
- 4.4 Medium severity
Samsung Mobile Devices Memory Corruption Exploited
An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic.
- 5.5 Medium severity
Samsung Mobile Devices Improper Access Control Exploited
An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.
- 7.1 High severity
Samsung Mobile Devices Improper Access Control Exploited
Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files.