Samsung vulnerabilities
We track 313 vulnerabilities in Samsung products across 60+ products. 305 are rated high or critical, and 14 have been exploited in real attacks. The most recent was published on October 12, 2026.
Latest Samsung vulnerabilities
- 7.8 High severity
exynos_980: Out-of-bounds Write
An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_config_get_nl_params(), there is no input validation check on disc_attr->mesh_id_len coming from userspace, which ca
- 7.8 High severity
exynos_850_firmware: Out-of-bounds Write
An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_config_get_nl_params(), there is no input validation check on disc_attr->infrastructure_ssid_len coming from userspa
- 7.8 High severity
exynos_980: Out-of-bounds Write
An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_followup_get_nl_params(), there is no input validation check on hal_req->service_specific_info_len coming from users
- 7.8 High severity
exynos_980_firmware: Out-of-bounds Write
An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_nan_config_get_nl_params(), there is no input validation check on hal_req->num_config_discovery_attr coming from userspa
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Heap out-of-bound write vulnerability in parsing grid image in libsavscmn.so prior to SMR June-2024 Release 1 allows local attackers to execute arbitrary code.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Heap out-of-bound write vulnerability in parsing grid image header in libsavscmn.so prior to SMR Jun-2024 Release 1 allows local attackers to execute arbitrary code.
- 7.3 High severity
Samsung_Portable_SSD_T5_Software_for_Windows: Insertion of Sensitive Information into Externally-Accessible File or Directory
An issue was discovered in the installer in Samsung Portable SSD for T5 1.6.10 on Windows. Because it is possible to tamper with the directory and DLL files used during the installation process, an attacker can escalate privileges through arbitrary code execut
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bound Write vulnerability in chunk parsing implementation of libsdffextractor prior to SMR Apr-2023 Release 1 allows local attackers to execute arbitrary code.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Improper Input Validation vulnerability in text parsing implementation of libsdffextractor prior to SMR Apr-2024 Release 1 allows local attackers to write out-of-bounds memory.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds write vulnerability while releasing memory in libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds write vulnerability while parsing remaining codewords in libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code.
- 7.1 High severity
Samsung Mobile Devices: Out-of-bounds Write
Improper input validation in IpcTxSndSetLoopbackCtrl in libsec-ril prior to SMR Sep-2023 Release 1 allows local attackers to write out-of-bounds memory.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds Write vulnerabilities in svc1td_vld_plh_ap of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds Write vulnerabilities in svc1td_vld_elh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds Write vulnerabilities in svc1td_vld_slh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.
- 7.5 High severity
Samsung Data Store: Improper Handling of Exceptional Conditions
Improper handling of insufficient permissions or privileges vulnerability in Samsung Data Store prior to version 5.2.00.7 allows remote attackers to access location information without permission.
- 7.8 High severity
Samsung Mobile Devices: Integer Overflow or Wraparound
Integer overflow vulnerability in landmarkCopyImageToNative of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow.
- 7.8 High severity
Samsung Mobile Devices: Integer Overflow or Wraparound
Integer overflow vulnerability in detectionFindFaceSupportMultiInstance of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow.
- 7.5 High severity
Exynos 9810 Firmware: Buffer Copy without Checking Size of Input
An issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem (Exynos 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, Modem 5123, Modem 5300, and Auto T5123). A buffer copy, without checkin
- 7.5 High severity
Exynos 9810 Firmware: Out-of-bounds Write
An issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem (Exynos 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, Modem 5123, Modem 5300, and Auto T5123). Improper handling of a length
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Read
An improper input validation in saped_rec_silence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Read
An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.
- 7.5 High severity
Samsung Mobile Devices: Improper Certificate Validation
Improper Certificate Validation in FotaAgent prior to SMR Nov-2023 Release1 allows remote attacker to intercept the network traffic including Firmware information.
- 7.1 High severity
Samsung Mobile Devices: Improper Authentication
Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass restrictions on starting activities from the background.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Stack-based Buffer Overflow in vulnerability HDCP trustlet prior to SMR Oct-2023 Release 1 allows local privileged attackers to perform code execution.
- 7.3 High severity
Memory Card & Ufd Authentication: Uncontrolled Search Path Element
A DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software before 1.0.1 could allow a local attacker to escalate privileges. (An attacker must already have user privileges on Windows to exploit this vulnerability.)
- 7.5 High severity
mobile_processor_wearable_processor: Out-of-bounds Read
An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor (Exynos 980, Exynos 850, Exynos 2100, and Exynos W920). Improper handling of length parameter inconsistency can cause incorrect packet filtering.
- 7.5 High severity
Exynos 9810 Firmware: NULL Pointer Dereference
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem (Exynos Mobile Processor, Automotive Processor, and Modem - Exynos 9810, Exynos 9610, Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos
- 7.5 High severity
Samsung Email: Improper Certificate Validation
Improper Certificate Validation in Samsung Email prior to version 6.1.82.0 allows remote attacker to intercept the network traffic including sensitive information.
- 7.5 High severity
exynos: Buffer Copy without Checking Size of Input
An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, and W920. Improper handling of PPP length parameter inconsistency can cause an infinite loop.
- 7.8 High severity
Galaxy book Go, Galaxy book Go 5G, Galaxy…: Out-of-bounds Write
Stack overflow vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" in Windows Update for Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go and Galaxy book2 Pro 360 allows local attacker to execu
- 9.8 Critical severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds write vulnerability in parser_hvcC function of libsimba library prior to SMR Aug-2023 Release 1 allows code execution by remote attackers.
- 7.8 High severity
Galaxy book Go, Galaxy book Go 5G, Galaxy…: Out-of-bounds Write
Out-of-bounds Write vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" in Windows Update for Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go and Galaxy book2 Pro 360 allows local attacker to
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds Write in DoOemFactorySendFactoryBypassCommand of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds Write in BuildOemEmbmsGetSigStrengthResponse of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds Write in DoOemFactorySendFactoryTestResult of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacker to execute arbitrary code.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Improper input validation vulnerability in DoOemImeiSetPreconfig in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds write.
- 7.8 High severity
Improper input validation vulnerability in OemPersonalizationSetLock in libsec-ril prior to…
Improper input validation vulnerability in OemPersonalizationSetLock in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds write.