← Back

Samsung

samsung

1,582 CVEs • 2,870 products

Products (2,870)

Click to collapse
Toggle
Android
android
Notes
notes
X14j Firmware
x14j_firmware
Galaxy Store
galaxy_store
Internet
internet
Account
account
Escargot
escargot
Wear Os
wear_os
Smartthings
smartthings
Smart Switch
smart_switch
Members
members
Health
health
Mtower
mtower
Kies
kies
Pass
pass
Rlottie
rlottie
Email
email
One
one
Magician
magician
Cloud
cloud
Gallery
gallery
Camera
camera
Flow
flow
Samsung Email
samsung_email
Tizenrt
tizenrt
Group Sharing
group_sharing
Samsung Pass
samsung_pass
Quick Share
quick_share
Calendar
calendar
Net I Viewer
net-i_viewer
Smartviewer
smartviewer
Knox
knox
Galaxy Apps
galaxy_apps
Exynos
exynos
Bixby
bixby
Samsung Flow
samsung_flow
Samsung Pay
samsung_pay
Myfiles
myfiles
Sassistant
sassistant
Assistant
assistant

CVEs (1,582)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Samsung
1Walrus
Jul 24, 2026
May 19, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
NULL pointer dereference vulnerability in Samsung Open Source Walrus allows an attacker to cause a denial of service via a crafted WebAssembly module containing deeply nested instructions. This issue affects Walrus: f33...Show more
NULL pointer dereference vulnerability in Samsung Open Source Walrus allows an attacker to cause a denial of service via a crafted WebAssembly module containing deeply nested instructions. This issue affects Walrus: f339b8ee4ea701772e8ae640b3d1b12ac02b1ae9.Show less
1Samsung
1Android
Jun 17, 2026
May 13, 2026
6.9 MEDIUM· v4
5.5 MEDIUM· v3
N/A· v2
Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.
1Samsung
1Android
Jun 17, 2026
May 13, 2026
5.1 MEDIUM· v4
6.8 MEDIUM· v3
N/A· v2
Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity.
1Samsung
1Android
Jun 17, 2026
May 13, 2026
5.1 MEDIUM· v4
7.8 HIGH· v3
N/A· v2
Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers to trigger privileged functions.
1Samsung
1Android
Jun 17, 2026
May 13, 2026
6.8 MEDIUM· v4
6.7 MEDIUM· v3
N/A· v2
Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary code.
1Samsung
1Android
Jun 17, 2026
May 13, 2026
5.1 MEDIUM· v4
5.5 MEDIUM· v3
N/A· v2
Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.
1Samsung
1Android
Jun 17, 2026
May 13, 2026
6.8 MEDIUM· v4
5.5 MEDIUM· v3
N/A· v2
Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local attacker to access unique identifier.
1Samsung
1Android
Jun 17, 2026
Apr 29, 2026
6.9 MEDIUM· v4
5.5 MEDIUM· v3
N/A· v2
Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the installation restriction of specific application.
1Samsung
1One
Sep 24, 2026
Apr 22, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Missing bounds validation for operator could allow out of range operator-code lookup during model loading Affected version is prior to commit 1.30.0.
1Samsung
1One
Jun 17, 2026
Apr 22, 2026
N/A· v4
6.6 MEDIUM· v3
N/A· v2
Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE Affected version is prior to commit 1.30.0.
1Samsung
1One
Jun 17, 2026
Apr 22, 2026
N/A· v4
6.6 MEDIUM· v3
N/A· v2
Integer overflow in constant tensor data size calculation in Samsung Open Source ONE could cause incorrect buffer sizing for large constant nodes. Affected version is prior to commit 1.30.0.
1Samsung
1One
Jun 17, 2026
Apr 22, 2026
N/A· v4
6.6 MEDIUM· v3
N/A· v2
Integer overflow in tensor copy size calculation in Samsung Open Source ONE could lead to out of bounds access during loop state propagation. Affected version is prior to commit 1.30.0.
1Samsung
1One
Jun 17, 2026
Apr 22, 2026
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause incorrect memory initialization for large intermediate tensors. Affected version is prior to commit 1.30.0.
1Samsung
1One
Jun 17, 2026
Apr 22, 2026
N/A· v4
6.6 MEDIUM· v3
N/A· v2
Integer overflow in memory copy size calculation in Samsung Open Source ONE could lead to invalid memory operations with large tensor shapes. Affected version is prior to commit 1.30.0.
1Samsung
1One
Jun 17, 2026
Apr 22, 2026
N/A· v4
6.6 MEDIUM· v3
N/A· v2
Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy length and memory corruption for oversized tensors. Affected version is prior to commit 1.30.0.
1Samsung
1One
Jun 17, 2026
Apr 22, 2026
N/A· v4
6.6 MEDIUM· v3
N/A· v2
Integer overflow in buffer size calculation could result in out of bounds memory access when handling large tensors in Samsung Open Source ONE. Affected version is prior to commit 1.30.0.
1Samsung
1One
Jun 17, 2026
Apr 22, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Potential Integer overflow in tensor allocation size calculation could lead to insufficient memory allocation for large tensors in Samsung Open Source ONE. Affected version is prior to commit  1.30.0.
1Samsung
1Escargot
Jun 17, 2026
Apr 13, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
1Samsung
1Camera
Jun 17, 2026
Apr 13, 2026
5.1 MEDIUM· v4
2.8 LOW· v3
N/A· v2
Improper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to access location data. User interaction is required for triggering this vulnerability.
1Samsung
1Galaxy Wearable
Jun 17, 2026
Apr 13, 2026
6.9 MEDIUM· v4
5.5 MEDIUM· v3
N/A· v2
Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive information.