Samsung vulnerabilities
We track 313 vulnerabilities in Samsung products across 60+ products. 305 are rated high or critical, and 14 have been exploited in real attacks. The most recent was published on October 12, 2026.
Latest Samsung vulnerabilities
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc() function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.
- 7.8 High severity
Samsung Mobile Devices: Use After Free
Use after free vulnerability in sdp_mm_set_process_sensitive function of sdpmm driver prior to SMR Sep-2022 Release 1 allows attackers to perform malicious actions.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
A heap-based overflow vulnerability in ConstructDictionary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
A heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
A heap-based overflow vulnerability in HWR::EngJudgeModel::Construct() in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
A heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
A heap-based overflow vulnerability in prepareRecogLibrary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.
- 7.8 High severity
Samsung Mobile Devices: Out-of-bounds Write
A heap-based overflow vulnerability in PrepareRecogLibrary_Part function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.
- 7.5 High severity
Tizenrt: Missing Release of Memory after Effective Lifetime
An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). cyassl_connect_step2 in curl/vtls/cyassl.c has a missing X509_free after SSL_get_peer_certificate, leading to information disclosure.
- 7.5 High severity
Tizenrt: Missing Release of Resource after Effective Lifetime
An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). createDB in security/provisioning/src/provisioningdatabasemanager.c has a missing sqlite3_close after sqlite3_open_v2, leading to a denial of service.
- 7.5 High severity
Mtower: NULL Pointer Dereference
There is a NULL pointer dereference in aes256_encrypt in Samsung mTower through 0.3.0 due to a missing check on the return value of EVP_CIPHER_CTX_new.
- 7.5 High severity
Mtower: Allocation of Resources Without Limits or Throttling
TEE_Malloc in Samsung mTower through 0.3.0 allows a trusted application to achieve Excessive Memory Allocation via a large len value, as demonstrated by a Numaker-PFM-M2351 TEE kernel crash.
- 7.8 High severity
Game Optimizing Service: Improper Privilege Management
Improper Privilege Management vulnerability in Game Optimizing Service prior to versions 3.3.04.0 in Android 10, and 3.5.04.8 in Android 11 and above allows local attacker to execute hidden function for developer by changing package name.
- 7.1 High severity
Samsung Mobile Devices: Improper Authentication
Improper access control vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows local attackers to scan and connect to PC by unprotected binder call.
- 7.8 High severity
Mtower: Missing Release of Memory after Effective Lifetime
The TEE_PopulateTransientObject and __utee_from_attr functions in Samsung mTower 0.3.0 allow a trusted application to trigger a memory overwrite, denial of service, and information disclosure by invoking the function TEE_PopulateTransientObject with a large nu
- 7.8 High severity
Galaxy Store: Improper Privilege Management
Improper input validation vulnerability in BillingPackageInsraller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege.
- 7.8 High severity
Galaxy Store: Improper Privilege Management
Improper input validation vulnerability in ApexPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege.
- 7.8 High severity
Galaxy Store: Improper Privilege Management
Improper input validation vulnerability in AppsPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege.
- 7.8 High severity
Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows…
Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of Finder.
- 7.8 High severity
Samsung Mobile Devices: Improper Authentication
Improper authentication vulnerability in AppLock prior to SMR Jul-2022 Release 1 allows attacker to bypass password confirm activity by hijacking the implicit intent.
- 7.8 High severity
Implicit Intent hijacking vulnerability in AppLinker prior to SMR Jul-2022 Release 1 allow…
Implicit Intent hijacking vulnerability in AppLinker prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of AppLinker.
- 7.8 High severity
Smart Things: Improper Authentication
Improper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to add arbitrary smart devices by bypassing login activity.
- 7.5 High severity
Smart Things: Missing Authorization
Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely using javascript interface API.
- 7.5 High severity
Samsung Account: Exposure of Resource to Wrong Sphere
Exposure of Sensitive Information vulnerability in Samsung Account prior to version 13.2.00.6 allows attacker to access sensitive information via onActivityResult.
- 7.8 High severity
Unprotected component vulnerability in DeviceSearchTrampoline in SecSettingsIntelligence prior…
Unprotected component vulnerability in DeviceSearchTrampoline in SecSettingsIntelligence prior to SMR Jun-2022 Release 1 allows local attackers to launch activities of SecSettingsIntelligence.
- 9.8 Critical severity
Samsung Mobile Devices: Improper Authorization
Implicit Intent hijacking vulnerability in Samsung Account prior to SMR Jun-2022 Release 1 allows attackers to bypass user confirmation of Samsung Account.
- 7.8 High severity
Gear IconX PC Manager: Uncontrolled Search Path Element
DLL hijacking vulnerability in Gear IconX PC Manager prior to version 2.1.220405.51 allows attacker to execute arbitrary code. The patch adds proper absolute path to prevent dll hijacking.
- 7.1 High severity
Improper validation of removing package name in Galaxy Themes prior to SMR May-2022 Release 1…
Improper validation of removing package name in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to uninstall arbitrary packages without permission. The patch adds proper validation logic for removing package name.
- 7.8 High severity
Samsung Android USB Driver windows installer: Uncontrolled Search Path Element
Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code.
- 7.8 High severity
Galaxy Store: Improper Authorization
Improper access control vulnerability in Galaxy Store prior to version 4.5.36.4 allows attacker to install applications from Galaxy Store without user interactions.
- 7.8 High severity
Samsung Update: Uncontrolled Search Path Element
Uncontrolled search path element vulnerability in Samsung Update prior to version 3.0.77.0 allows attackers to execute arbitrary code as Samsung Update permission.
- 7.8 High severity
Accessibility: Files or Directories Accessible to External Parties
A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R(11.0) and 13.0.1.1 in Android S(12.0) allows attacker to access the file with system privilege.
- 7.8 High severity
Samsung Mobile Devices: Improper Limitation of a Pathname to a Restricted Directory
Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1 allow local attackers to access arbitrary system files without a proper permission. The patch adds proper validation logic t
- 7.0 High severity
Samsung Mobile Devices: Use After Free
Use after free vulnerability in dsp_context_unload_graph function of DSP driver prior to SMR Apr-2022 Release 1 allows attackers to perform malicious actions.
- 7.1 High severity
Samsung Mobile Devices: Out-of-bounds Read
Improper size check in sapefd_parse_meta_HEADER function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file.
- 7.1 High severity
Samsung Mobile Devices: Out-of-bounds Read
Improper size check of in sapefd_parse_meta_DESCRIPTION function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file
- 7.1 High severity
Samsung Mobile Devices: Out-of-bounds Read
Improper size check in sapefd_parse_meta_HEADER_old function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file.
- 7.2 High severity
Samsung Mobile Devices: Out-of-bounds Write
Improper input validation vulnerability in parser_iloc and sheifd_find_itemIndexin fuctions of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by privileged attacker.
- 7.2 High severity
Samsung Mobile Devices: Out-of-bounds Write
Improper input validation vulnerability in parser_infe and sheifd_find_itemIndexin fuctions of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by privileged attackers.
- 9.8 Critical severity
Samsung Mobile Devices: Out-of-bounds Write
Heap-based buffer overflow vulnerability in parser_ipma function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attackers.