Samsung vulnerabilities
We track 313 vulnerabilities in Samsung products across 60+ products. 305 are rated high or critical, and 14 have been exploited in real attacks. The most recent was published on October 12, 2026.
Latest Samsung vulnerabilities
- 7.8 High severity
Improper input validation vulnerability in EnhancedAttestationResult prior to SMR Jul-2023…
Improper input validation vulnerability in EnhancedAttestationResult prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out of bounds read and write in enableTspDevice of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out of bounds read and write in callrunTspCmdNoRead of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out of bounds read and write in callgetTspsysfs of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out of bounds read and write in callrunTspCmd of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.
- 7.1 High severity
Samsung Mobile Devices: Missing Authentication for Critical Functionality
Missing authentication vulnerability in Galaxy Themes Service prior to SMR Jul-2023 Release 1 allows local attackers to delete arbitrary non-preloaded applications.
- 9.8 Critical severity
Exynos 5123 Firmware: Incorrect Default Permissions
An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. An incorrect default permission can cause unintended querying of RCS capability via a crafted application.
- 7.5 High severity
Exynos 5123 Firmware: Incorrect Resource Transfer Between Spheres
An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. Incorrect resource transfer between spheres can cause changes to the activation mode of RCS via a crafted application.
- 9.1 Critical severity
Exynos 5123 Firmware: Incorrect Resource Transfer Between Spheres
An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. Incorrect resource transfer between spheres can cause unintended querying of the SIM status via a crafted application.
- 9.6 Critical severity
Galaxy Store: Improper Neutralization of Input During Web Page Generation
XSS vulnerability from InstantPlay in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store.
- 8.8 High severity
InstantPlay which included vulnerable script which could execute javascript in Galaxy Store…
InstantPlay which included vulnerable script which could execute javascript in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store.
- 8.8 High severity
Improper scheme validation from InstantPlay Deeplink in Galaxy Store prior to version 4.5.49.8…
Improper scheme validation from InstantPlay Deeplink in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store.
- 7.8 High severity
Exynos 5123 Firmware: Improper Handling of Exceptional Conditions
An issue was discovered in Exynos Mobile Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and Exynos 1080. Binding of a wrong resource can occur due to improper handling of parameters while binding a network interface.
- 7.8 High severity
Samsung Blockchain Keystore: Out-of-bounds Write
Out-of-bounds Write vulnerability while processing BC_TUI_CMD_UPDATE_SCREEN in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code.
- 7.8 High severity
Samsung Blockchain Keystore: Out-of-bounds Write
Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code.
- 7.8 High severity
Samsung Blockchain Keystore: Out-of-bounds Write
Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code.
- 9.8 Critical severity
Samsung Mobile Devices: Buffer Copy without Checking Size of Input
Potential buffer overflow vulnerability in mm_Plmncoordination.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause invalid memory access.
- 9.8 Critical severity
Samsung Mobile Devices: Buffer Copy without Checking Size of Input
Potential buffer overflow vulnerability in mm_LteInterRatManagement.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause invalid memory access.
- 7.8 High severity
Improper input validation vulnerability in FactoryTest application prior to SMR May-2023…
Improper input validation vulnerability in FactoryTest application prior to SMR May-2023 Release 1 allows local attackers to get privilege escalation via debugging commands.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
Out-of-bounds write vulnerability in TA_Communication_mpos_encrypt_pin in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to execute arbitrary code.
- 7.8 High severity
Improper input validation vulnerability in setPartnerTAInfo in mPOS TUI trustlet prior to SMR…
Improper input validation vulnerability in setPartnerTAInfo in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to overwrite the trustlet memory.
- 7.8 High severity
Samsung Mobile Devices: Use of Externally-Controlled Format String
Use of externally-controlled format string vulnerability in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the memory address.
- 9.8 Critical severity
Samsung Mobile Devices: Buffer Copy without Checking Size of Input
Potential buffer overflow vulnerability in auth api in mm_Authentication.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause invalid memory access.
- 4.4 Medium severity
Samsung Mobile Devices Insertion of Sensitive Information Into Log File Exploited
Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.
- 7.8 High severity
Samsung Mobile Devices: Improper Access Control
Improper access control vulnerability in ThemeManager prior to SMR May-2023 Release 1 allows local attackers to write arbitrary files with system privilege.
- 7.8 High severity
Samsung Mobile Devices: Improper Authentication
Improper access control vulnerability in AppLock prior to SMR May-2023 Release 1 allows local attackers without proper permission to execute a privileged operation.
- 7.5 High severity
Exynos 5300 Firmware: Out-of-bounds Write
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validati
- 7.5 High severity
Exynos 5300 Firmware: Out-of-bounds Write
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validati
- 7.5 High severity
Exynos 5300 Firmware: Out-of-bounds Read
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validati
- 7.5 High severity
Exynos 5300 Firmware: Out-of-bounds Write
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validati
- 7.5 High severity
Exynos 5300 Firmware: Out-of-bounds Write
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validati
- 7.5 High severity
Exynos 5300 Firmware: Out-of-bounds Write
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validati
- 7.5 High severity
Exynos 5300 Firmware: Out-of-bounds Write
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validati
- 9.8 Critical severity
Exynos 1280 Firmware: Integer Overflow or Wraparound
An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300. An integer overflow in IPv4 fragment handling can occur due to insufficient parameter validation when reassembling thes
- 9.8 Critical severity
Exynos Modem 5300 Firmware: Out-of-bounds Write
An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T5124. Memory corruption can occur due to improper checking of the parameter length while parsing the fmtp attribute in
- 9.8 Critical severity
Exynos Modem 5300 Firmware: Out-of-bounds Write
An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos Auto T5126. Memory corruption can occur due to improper checking of the number of properties while parsing the chatroom attribut
- 9.8 Critical severity
Exynos Modem 5300 Firmware: Out-of-bounds Write
An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T5125. Memory corruption can occur when processing Session Description Negotiation for Video Configuration Attribute.
- 8.1 High severity
Samsung Mobile Devices: Improper Access Control
Improper access control vulnerability in Bluetooth prior to SMR Mar-2023 Release 1 allows attackers to send file via Bluetooth without related permission.
- 9.8 Critical severity
Exynos 1280 Firmware: Buffer Copy without Checking Size of Input
An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G SM message codec can occur due to insufficient parameter
- 9.8 Critical severity
Exynos 850 Firmware: Out-of-bounds Write
An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. A heap-based buffer overflow in the 5G MM message codec