← Back

Samsung

samsung

1,527 CVEs • 2,868 products

Products (2,868)

Click to collapse
Toggle
Android
android
Notes
notes
X14j Firmware
x14j_firmware
Galaxy Store
galaxy_store
Internet
internet
Account
account
Escargot
escargot
Wear Os
wear_os
Smartthings
smartthings
Members
members
Mtower
mtower
Smart Switch
smart_switch
Kies
kies
Health
health
Pass
pass
Email
email
Magician
magician
Cloud
cloud
Gallery
gallery
One
one
Camera
camera
Flow
flow
Samsung Email
samsung_email
Tizenrt
tizenrt
Group Sharing
group_sharing
Samsung Pass
samsung_pass
Quick Share
quick_share
Calendar
calendar
Net I Viewer
net-i_viewer
Smartviewer
smartviewer
Knox
knox
Galaxy Apps
galaxy_apps
Exynos
exynos
Samsung Flow
samsung_flow
Samsung Pay
samsung_pay
Myfiles
myfiles
Sassistant
sassistant
Assistant
assistant
Rlottie
rlottie
Smart Viewer
smart_viewer

CVEs (1,527)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Samsung
1Android
Jun 17, 2026
Jul 8, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Improper access control in isemtelephony prior to Android 15 allows local attackers to access sensitive information.
1Samsung
1Wear Os
Jun 17, 2026
Jul 8, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to power off the device.
1Samsung
1Android
Jun 17, 2026
Jul 8, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Insecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows local attackers to access sensitive information.
1Samsung
1Android
Jun 17, 2026
Jul 8, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to manipulate broadcasting Auracast.
1Samsung
1Android
Jun 17, 2026
Jul 8, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to stop broadcasting Auracast.
1Samsung
1Android
Jun 17, 2026
Jul 8, 2025
N/A· v4
3.3 LOW· v3
N/A· v2
Improper privilege management in Bluetooth prior to SMR Jul-2025 Release 1 allows local attackers to enable Bluetooth.
1Samsung
1Android
Jun 17, 2026
Jul 8, 2025
N/A· v4
2.1 LOW· v3
N/A· v2
Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025 Release 1 allows secondary users to access owner's saved Wi-Fi password.
1Samsung
1Wear Os
Jun 17, 2026
Jul 8, 2025
N/A· v4
3.3 LOW· v3
N/A· v2
Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number.
1Samsung
1Wear Os
Jun 17, 2026
Jul 8, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Incorrect default permission in Framework for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to reset some configuration of Galaxy Watch.
1Samsung
1Android
Jun 17, 2026
Jul 8, 2025
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Out-of-bounds write in checking auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
1Samsung
1Android
Jun 17, 2026
Jul 8, 2025
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Out-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
1Samsung
19Exynos 1080 Firmware
Exynos 1280 FirmwareExynos 1330 Firmware+16 more
Jun 17, 2026
Jul 7, 2025
N/A· v4
9.1 CRITICAL· v3
N/A· v2
In RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400, the lack of a...Show more
In RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400, the lack of a length check leads to out-of-bounds writes.Show less
1Samsung
2Exynos 2400 Firmware
Modem 5400 Firmware
Jun 17, 2026
Jul 7, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue was discovered in L2 in Samsung Mobile Processor and Modem Exynos 2400 and Modem 5400. The lack of a length check leads to a Denial of Service via a malformed PDCP packet.
1Samsung
1Rlottie
Jun 17, 2026
Jun 30, 2025
5.1 MEDIUM· v4
9.8 CRITICAL· v3
N/A· v2
Improper Input Validation vulnerability in Samsung Open Source rLottie allows Overread Buffers.This issue affects rLottie: V0.2.
1Samsung
1Rlottie
Jun 17, 2026
Jun 30, 2025
5.1 MEDIUM· v4
9.1 CRITICAL· v3
N/A· v2
Out-of-bounds Read vulnerability in Samsung Open Source rLottie allows Overflow Buffers.This issue affects rLottie: V0.2.
1Samsung
1Rlottie
Jun 17, 2026
Jun 30, 2025
4.6 MEDIUM· v4
9.8 CRITICAL· v3
N/A· v2
Improper Input Validation vulnerability in Samsung Open Source rLottie allows Path Traversal.This issue affects rLottie: V0.2.
1Samsung
1Rlottie
Jun 17, 2026
Jun 30, 2025
5.1 MEDIUM· v4
9.8 CRITICAL· v3
N/A· v2
Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2.
1Samsung
3Exynos 1480 Firmware
Exynos 2200 FirmwareExynos 2400 Firmware
Jun 17, 2026
Jun 4, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. A Use-After-Free in the mobile processor leads to privilege escalation.
1Samsung
1Exynos 1380 Firmware
Jun 17, 2026
Jun 4, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
An issue was discovered in Samsung Mobile Processor Exynos 1380. A Use-After-Free in the mobile processor leads to privilege escalation.
1Samsung
5Exynos 1280 Firmware
Exynos 1380 FirmwareExynos 1480 Firmware+2 more
Jun 17, 2026
Jun 4, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400. A Double Free in the mobile processor leads to privilege escalation.