Samsung

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-7896 1Samsung 1Samsung Mobile May 13, 2026 Aug 24, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service (memory corruption and SIGSEGV) via a crafted image file.
CVE-2015-1801 1Samsung 1Galaxy S4 Firmware May 13, 2026 Aug 24, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers to cause a denial of service (memory corruption) or gain privileges.
CVE-2015-1800 1Samsung 1Galaxy S4 Firmware May 13, 2026 Aug 24, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers to potentially obtain sensitive information.
CVE-2015-7894 1Samsung 1Galaxy S6 Edge Firmware May 13, 2026 Aug 9, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The DCMProvider service in Samsung LibQjpeg on a Samsung SM-G925V device running build number LRX22G.G925VVRU1AOE2 allows remote attackers to cause a denial of service (segmentation fault and process crash) and execute a...Show more The DCMProvider service in Samsung LibQjpeg on a Samsung SM-G925V device running build number LRX22G.G925VVRU1AOE2 allows remote attackers to cause a denial of service (segmentation fault and process crash) and execute arbitrary code via a crafted JPG.Show less
CVE-2015-7891 1Samsung 1Samsung Mobile May 13, 2026 Aug 2, 2017 N/A· v4 7.0 HIGH· v3 4.4 MEDIUM· v2 Race condition in the ioctl implementation in the Samsung Graphics 2D driver (aka /dev/fimg2d) in Samsung devices with Android L(5.0/5.1) allows local users to trigger memory errors by leveraging definition of g2d_lock a...Show more Race condition in the ioctl implementation in the Samsung Graphics 2D driver (aka /dev/fimg2d) in Samsung devices with Android L(5.0/5.1) allows local users to trigger memory errors by leveraging definition of g2d_lock and g2d_unlock lock macros as no-ops, aka SVE-2015-4598.Show less
CVE-2015-7898 1Samsung 1Samsung Mobile May 13, 2026 Jun 27, 2017 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).
CVE-2015-7895 1Samsung 1Samsung Mobile May 13, 2026 Jun 27, 2017 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).
CVE-2017-3218 1Samsung 1Magician May 13, 2026 Jun 21, 2017 N/A· v4 8.8 HIGH· v3 8.3 HIGH· v2 Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior to version 5.0, Samsung Magician uses HTTP for software updates.
CVE-2015-7888 1Samsung 1Galaxy S6 Edge Firmware May 13, 2026 Jun 7, 2017 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remote attackers to overwrite or create arbitrary files as the system-level user via a .. (dot dot) in th...Show more Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remote attackers to overwrite or create arbitrary files as the system-level user via a .. (dot dot) in the name of a file, compressed into a zipped file named cred.zip, and downloaded to /sdcard/Download.Show less
CVE-2015-5473 1Samsung 1Syncthru 6 May 13, 2026 Jun 1, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remote attackers to delete arbitrary files via unspecified parameters to (1) upload/updateDriver or (2) upload/addDriver or to execute a...Show more Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remote attackers to delete arbitrary files via unspecified parameters to (1) upload/updateDriver or (2) upload/addDriver or to execute arbitrary code with SYSTEM privileges via unspecified parameters to (3) uploadCloning.html, (4) fileupload.html, (5) uploadFirmware.html, or (6) upload/driver.Show less
CVE-2017-7978 1Samsung 1Samsung Mobile May 13, 2026 Apr 19, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Samsung Android devices with L(5.0/5.1), M(6.0), and N(7.x) software allow attackers to obtain sensitive information by reading a world-readable log file after an unexpected reboot. The Samsung ID is SVE-2017-8290.
CVE-2016-4032 1Samsung 5Galaxy Note 3 Firmware Galaxy S4 FirmwareGalaxy S4 Mini Firmware+2 more May 13, 2026 Apr 13, 2017 N/A· v4 4.6 MEDIUM· v3 2.1 LOW· v2 Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUH...Show more Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices do not block AT+USBDEBUG and AT+WIFIVALUE, which allows attackers to modify Android settings by leveraging AT access, aka SVE-2016-5301.Show less
CVE-2016-4031 1Samsung 5Galaxy Note 3 Firmware Galaxy S4 FirmwareGalaxy S4 Mini Firmware+2 more May 13, 2026 Apr 13, 2017 N/A· v4 6.8 MEDIUM· v3 4.6 MEDIUM· v2 Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUH...Show more Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices allow attackers to send AT commands by plugging the device into a Linux host, aka SVE-2016-5301.Show less
CVE-2016-4030 1Samsung 5Galaxy Note 3 Firmware Galaxy S4 FirmwareGalaxy S4 Mini Firmware+2 more May 13, 2026 Apr 13, 2017 N/A· v4 6.8 MEDIUM· v3 4.6 MEDIUM· v2 Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUH...Show more Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices have unintended availability of the modem in USB configuration number 2 within the secure lockscreen state, allowing an attacker to make phone calls, send text messages, or issue commands, aka SVE-2016-5301.Show less
CVE-2016-2567 1Samsung 2Galaxy Note 3 Firmware Galaxy S6 Firmware May 13, 2026 Apr 13, 2017 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to bypass URL filtering by inserting an "exceptional URL" in the...Show more secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to bypass URL filtering by inserting an "exceptional URL" in the query string, as demonstrated by the http://should-have-been-filtered.example.com/?http://google.com URL.Show less
CVE-2016-2566 1Samsung 1Galaxy S6 Firmware May 13, 2026 Apr 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 (Galaxy S6) devices has SQL injection, aka SVE-2015-5081.
CVE-2016-2565 1Samsung 1Galaxy S6 Firmware May 13, 2026 Apr 13, 2017 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to read sent e-mail messages, aka SVE-2015-5081.
CVE-2016-2036 1Samsung 2Galaxy Note 3 Firmware Galaxy S6 Firmware May 13, 2026 Apr 13, 2017 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 The getURL function in drivers/secfilter/urlparser.c in secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to trigge...Show more The getURL function in drivers/secfilter/urlparser.c in secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to trigger a NULL pointer dereference via a "GET HTTP/1.1" request, aka SVE-2016-5036.Show less
CVE-2015-8780 1Samsung 1Kies May 13, 2026 Apr 13, 2017 N/A· v4 6.4 MEDIUM· v3 6.9 MEDIUM· v2 Samsung wssyncmlnps before 2015-10-31 allows directory traversal in a Kies restore, aka ZipFury.
CVE-2015-7893 1Samsung 1Galaxy S6 May 13, 2026 Apr 11, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 SecEmailUI in Samsung Galaxy S6 does not sanitize HTML email content, allows remote attackers to execute arbitrary JavaScript.

Previous 1...697071...76 Next