Galaxy S4 Firmware

galaxy_s4_firmware

Vendor: Samsung • 8 CVEs

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2013-4764 1Samsung 2Galaxy S3 Firmware Galaxy S4 Firmware Nov 21, 2024 Dec 27, 2019 N/A· v4 4.3 MEDIUM· v3 2.1 LOW· v2 Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbitrary destinations without permission.
CVE-2013-4763 1Samsung 2Galaxy S3 Firmware Galaxy S4 Firmware Nov 21, 2024 Dec 27, 2019 N/A· v4 4.6 MEDIUM· v3 2.1 LOW· v2 Samsung Galaxy S3/S4 exposes an unprotected component allowing arbitrary SMS text messages without requesting permission.
CVE-2019-12762 6Fujitsu GoogleMi+3 more 8Aquos Zeta Sh 04f Firmware Arrows Nx F05 F FirmwareGalaxy S4 Firmware+5 more Jun 17, 2026 Jun 6, 2019 N/A· v4 4.2 MEDIUM· v3 1.9 LOW· v2 Xiaomi Mi 5s Plus devices allow attackers to trigger touchscreen anomalies via a radio signal between 198 kHz and 203 kHz, as demonstrated by a transmitter and antenna hidden just beneath the surface of a coffee-shop tab...Show more Xiaomi Mi 5s Plus devices allow attackers to trigger touchscreen anomalies via a radio signal between 198 kHz and 203 kHz, as demonstrated by a transmitter and antenna hidden just beneath the surface of a coffee-shop table, aka Ghost Touch.Show less
CVE-2015-1801 1Samsung 1Galaxy S4 Firmware May 13, 2026 Aug 24, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers to cause a denial of service (memory corruption) or gain privileges.
CVE-2015-1800 1Samsung 1Galaxy S4 Firmware May 13, 2026 Aug 24, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers to potentially obtain sensitive information.
CVE-2016-4032 1Samsung 5Galaxy Note 3 Firmware Galaxy S4 FirmwareGalaxy S4 Mini Firmware+2 more May 13, 2026 Apr 13, 2017 N/A· v4 4.6 MEDIUM· v3 2.1 LOW· v2 Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUH...Show more Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices do not block AT+USBDEBUG and AT+WIFIVALUE, which allows attackers to modify Android settings by leveraging AT access, aka SVE-2016-5301.Show less
CVE-2016-4031 1Samsung 5Galaxy Note 3 Firmware Galaxy S4 FirmwareGalaxy S4 Mini Firmware+2 more May 13, 2026 Apr 13, 2017 N/A· v4 6.8 MEDIUM· v3 4.6 MEDIUM· v2 Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUH...Show more Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices allow attackers to send AT commands by plugging the device into a Linux host, aka SVE-2016-5301.Show less
CVE-2016-4030 1Samsung 5Galaxy Note 3 Firmware Galaxy S4 FirmwareGalaxy S4 Mini Firmware+2 more May 13, 2026 Apr 13, 2017 N/A· v4 6.8 MEDIUM· v3 4.6 MEDIUM· v2 Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUH...Show more Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices have unintended availability of the modem in USB configuration number 2 within the secure lockscreen state, allowing an attacker to make phone calls, send text messages, or issue commands, aka SVE-2016-5301.Show less