← Back

Samsung

samsung

1,506 CVEs • 2,866 products

Products (2,866)

Click to collapse
Toggle
Android
android
Notes
notes
X14j Firmware
x14j_firmware
Galaxy Store
galaxy_store
Internet
internet
Account
account
Escargot
escargot
Wear Os
wear_os
Smartthings
smartthings
Members
members
Mtower
mtower
Smart Switch
smart_switch
Kies
kies
Health
health
Pass
pass
Email
email
Magician
magician
Cloud
cloud
Gallery
gallery
One
one
Camera
camera
Flow
flow
Samsung Email
samsung_email
Tizenrt
tizenrt
Group Sharing
group_sharing
Samsung Pass
samsung_pass
Quick Share
quick_share
Calendar
calendar
Net I Viewer
net-i_viewer
Smartviewer
smartviewer
Knox
knox
Galaxy Apps
galaxy_apps
Exynos
exynos
Samsung Flow
samsung_flow
Samsung Pay
samsung_pay
Myfiles
myfiles
Sassistant
sassistant
Rlottie
rlottie
Smart Viewer
smart_viewer

CVEs (1,506)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Samsung
18Exynos 1280 Firmware
Exynos 1330 FirmwareExynos 1380 Firmware+15 more
Dec 5, 2025
Dec 3, 2025
N/A· v4
5.3 MEDIUM· v3
N/A· v2
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Th...Show more
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. The function used to decode the SOR transparent container lacks bounds checking, which can cause a fatal error.Show less
1Samsung
1Smart Touch Call
Jan 8, 2026
Dec 2, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Improper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1.1 allows remote attackers to access sensitive information. User interaction is required for triggering this vulnerabilit...Show more
Improper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1.1 allows remote attackers to access sensitive information. User interaction is required for triggering this vulnerability.Show less
1Samsung
1Account
Dec 3, 2025
Dec 2, 2025
N/A· v4
3.3 LOW· v3
N/A· v2
Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary activity with Samsung Account privilege.
1Samsung
1Account
Dec 3, 2025
Dec 2, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Improper input validation in Samsung Account prior to version 15.5.01.1 allows local attacker to execute arbitrary script.
1Samsung
1Internet
Dec 3, 2025
Dec 2, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script.
1Samsung
1Galaxy Store
Dec 4, 2025
Dec 2, 2025
N/A· v4
3.3 LOW· v3
N/A· v2
Improper export of android application components in Galaxy Store for Galaxy Watch prior to version 1.0.06.29 allows local attacker to install arbitrary application on Galaxy Store.
1Samsung
1Motionphoto
Dec 4, 2025
Dec 2, 2025
N/A· v4
7.3 HIGH· v3
N/A· v2
Improper access control in MPLocalService of MotionPhoto prior to version 4.1.51 allows local attackers to start privileged service.
1Samsung
1Motionphoto
Dec 4, 2025
Dec 2, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper access control in MPRemoteService of MotionPhoto prior to version 4.1.51 allows local attackers to start privileged service.
1Samsung
1Android
Dec 5, 2025
Dec 2, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Heap-based buffer overflow in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.
1Samsung
1Android
Dec 5, 2025
Dec 2, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Out-of-bounds read in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.
1Samsung
1Android
Dec 5, 2025
Dec 2, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Out-of-bounds write in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.
1Samsung
1Android
Dec 5, 2025
Dec 2, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Out-of-bounds write in parsing IFD tag in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.
1Samsung
1Android
Dec 5, 2025
Dec 2, 2025
N/A· v4
4.6 MEDIUM· v3
N/A· v2
Out-of-bounds read vulnerability in bootloader prior to SMR Dec-2025 Release 1 allows physical attackers to access out-of-bounds memory.
1Samsung
1Android
Dec 5, 2025
Dec 2, 2025
N/A· v4
4.4 MEDIUM· v3
N/A· v2
Improper input validation in libsec-ril.so prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
1Samsung
1Android
Dec 5, 2025
Dec 2, 2025
N/A· v4
7.1 HIGH· v3
N/A· v2
Improper export of android application components in Dynamic Lockscreen prior to SMR Dec-2025 Release 1 allows local attackers to access files with Dynamic Lockscreen's privilege.
1Samsung
1Android
Dec 5, 2025
Dec 2, 2025
N/A· v4
4.4 MEDIUM· v3
N/A· v2
Out-of-bounds write in decoding metadata in fingerprint trustlet prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
1Samsung
1Members
Nov 7, 2025
Nov 5, 2025
N/A· v4
8.1 HIGH· v3
N/A· v2
Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for trigg...Show more
Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability.Show less
1Samsung
1Smart Switch
Nov 7, 2025
Nov 5, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications.
1Samsung
1Email
Nov 7, 2025
Nov 5, 2025
N/A· v4
3.3 LOW· v3
N/A· v2
Improper input validation in Samsung Email prior to version 6.2.06.0 allows local attackers to launch arbitrary activity with Samsung Email privilege.
1Samsung
1Account
Nov 7, 2025
Nov 5, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows local attackers to access data in Samsung Account. User interaction is required for triggering this vulner...Show more
Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows local attackers to access data in Samsung Account. User interaction is required for triggering this vulnerability.Show less