SM
Product
Samsung Mobile Devices
by Samsung Mobile · last CVE Oct 12, 2026
On CISA KEVExploited in the wild
345
CVEs
13
On KEV
9.8
Max CVSS
14
New 30D
Severity mix
Critical 9High 97Medium 191Low 48
Watch

Add Samsung Mobile Devices to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-21043
In wildKEV
9.8
2%
Sep 12
Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Affected: All versions, or not specified
CVE-2025-21042
In wildKEV
9.8
36%
Sep 12
Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Affected: All versions, or not specified
CVE-2022-22265
In wildKEV
7.8
0%
Jan 7
Samsung Mobile Devices Use-After-Free Vulnerability
Affected: O(8.x), P(9.0), Q(10.0), R(11.0), S(12.0) before SMR Jan-2022 Release 1
CVE-2021-25487
In wildKEV
7.8
1%
Oct 6
Samsung Mobile Devices Out-of-Bounds Read Vulnerability
Affected: O(8.1), P(9.0), Q(10.0), R(11.0) before SMR Oct-2021 Release 1
CVE-2021-25337
In wildKEV
7.1
3%
Mar 4
Samsung Mobile Devices Improper Access Control Vulnerability
Affected: Selected P(9.0), Q(10.0), R(11.0) before SMR Mar-2021 Release 1
CVE-2021-25372
In wildKEV
6.7
1%
Mar 26
Samsung Mobile Devices Improper Boundary Check Vulnerability
Affected: Q(10.0), R(11.0) devices with exynos980, exynos2100, exynos9830 before SMR Mar-2021 Release 1
CVE-2021-25371
In wildKEV
6.7
1%
Mar 26
Samsung Mobile Devices Unspecified Vulnerability
Affected: Q(10.0), R(11.0) devices with exynos980, exynos2100, exynos9830 before SMR Mar-2021 Release 1
CVE-2021-25394
In wildKEV
6.4
0%
Jun 11
Samsung Mobile Devices Race Condition Vulnerability
Affected: O(8.x), P(9.0), Q(10.0), R(11.0) before SMR MAY-2021 Release 1
CVE-2021-25395
In wildKEV
6.4
0%
Jun 11
Samsung Mobile Devices Race Condition Vulnerability
Affected: O(8.x), P(9.0), Q(10.0), R(11.0) before SMR MAY-2021 Release 1
CVE-2021-25489
In wildKEV
5.5
1%
Oct 6
Samsung Mobile Devices Improper Input Validation Vulnerability
Affected: O(8.1), P(9.0), Q(10.0), R(11.0) before SMR Oct-2021 Release 1
CVE-2021-25369
In wildKEV
5.5
1%
Mar 26
Samsung Mobile Devices Improper Access Control Vulnerability
Affected: O(8.x), P(9.0), Q(10.0) before SMR Mar-2021 Release 1
CVE-2023-21492
In wildKEV
4.4
3%
May 4
Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
Affected: Selected Android 11, 12, 13 devices before SMR May-2023 Release 1
CVE-2021-25370
In wildKEV
4.4
1%
Mar 26
Samsung Mobile Devices Memory Corruption Vulnerability
Affected: Selected O(8.X), P(9.0), Q(10.0), R(11.0) before SMR Mar-2021 Release 1
CVE-2026-21096
9.8
1%
Sep 9
Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code
Affected: All versions, or not specified
CVE-2026-21095
9.8
1%
Sep 9
Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code
Affected: All versions, or not specified
CVE-2023-21467
9.8
0%
Sep 3
Error in 3GPP specification implementation in Exynos baseband prior to SMR Apr-2023 Release 1 allows incorrect handling of unencrypted message
Affected: All versions, or not specified
CVE-2024-49415
9.8
1%
Dec 3
Out-of-bound write in libsaped.so prior to SMR Dec-2024 Release 1 allows remote attackers to execute arbitrary code
Affected: All versions, or not specified
CVE-2022-39862
9.8
1%
Oct 7
Improper authorization in Dynamic Lockscreen prior to SMR Sep-2022 Release 1 in Android R(11) and 3.3.03.66 in Android S(12) allows unauthorized use of javascript interface api
Affected: R(11), S(12) before SMR Oct-2022 Release 1
CVE-2022-33719
9.8
0%
Aug 5
Improper input validation in baseband prior to SMR Aug-2022 Release 1 allows attackers to cause integer overflow to heap overflow
Affected: 10, 11, 12 before SMR Aug-2022 Release 1
CVE-2026-20973
9.1
0%
Jan 9
Out-of-bounds read in libimagecodec.quram.so prior to SMR Jan-2026 Release 1 allows remote attacker to access out-of-bounds memory
Affected: All versions, or not specified
CVE-2026-21120
8.9
0%
Oct 12
Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege
Affected: All versions, or not specified
CVE-2026-21094
8.8
0%
Sep 9
Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory
Affected: All versions, or not specified
CVE-2025-20946
8.8
0%
Apr 8
Improper handling of exceptional conditions in pairing specific bluetooth devices in Galaxy Watch Bluetooth pairing prior to SMR Apr-2025 Release 1 allows local attackers to pair…
Affected: All versions, or not specified
CVE-2024-34669
8.8
1%
Oct 8
Out-of-bounds write in parsing h.263+ format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege
Affected: All versions, or not specified
CVE-2024-34668
8.8
1%
Oct 8
Out-of-bounds write in parsing h.263 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege
Affected: All versions, or not specified
CVE-2024-34667
8.8
1%
Oct 8
Out-of-bounds write in parsing h.265 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege
Affected: All versions, or not specified
CVE-2024-34666
8.8
1%
Oct 8
Out-of-bounds write in parsing h.264 format in a specific mode in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system…
Affected: All versions, or not specified
CVE-2024-34665
8.8
1%
Oct 8
Out-of-bounds write in parsing h.264 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege
Affected: All versions, or not specified
CVE-2024-34619
8.8
1%
Aug 7
Improper input validation in librtp.so prior to SMR Aug-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege
Affected: android12 before smraug-2024release; android13 before smraug-2024release; android14 before smraug-2024release
CVE-2026-21042
8.7
1%
Jul 10
Out-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows remote attackers to execute arbitrary code
Affected: All versions, or not specified
CVE-2026-21125
8.6
0%
Oct 12
Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code
Affected: All versions, or not specified
CVE-2026-21124
8.6
0%
Oct 12
Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code
Affected: All versions, or not specified
CVE-2026-21019
8.6
0%
May 13
Improper input validation in FacAtFunction in Galaxy Watch prior to SMR May-2026 Release 1 allows local attacker to execute arbitrary code with system privilege
Affected: All versions, or not specified
CVE-2026-21049
8.4
0%
Jul 10
Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary code
Affected: All versions, or not specified
CVE-2026-21046
8.4
0%
Jul 10
Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR Jul-2026 Release 1 allows local privileged attackers to execute arbitrary code
Affected: All versions, or not specified
CVE-2026-21047
8.3
1%
Jul 28
Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to potentially execute arbitrary code
Affected: All versions, or not specified
CVE-2026-21048
8.3
1%
Jul 10
Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory
Affected: All versions, or not specified
CVE-2026-21045
8.3
1%
Jul 10
Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory
Affected: All versions, or not specified
CVE-2026-20990
8.1
0%
Mar 16
Improper export of android application components in Secure Folder prior to SMR Mar-2026 Release 1 allows local attackers to launch arbitrary activity with Secure Folder privilege
Affected: All versions, or not specified
CVE-2026-21091
7.8
0%
Sep 9
Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory
Affected: All versions, or not specified
CVE-2026-21090
7.8
0%
Sep 9
Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory
Affected: All versions, or not specified
CVE-2026-21089
7.8
0%
Sep 9
Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory
Affected: All versions, or not specified
CVE-2026-21088
7.8
0%
Sep 9
Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory
Affected: All versions, or not specified
CVE-2026-21087
7.8
0%
Sep 9
Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege
Affected: All versions, or not specified
CVE-2026-21086
7.8
0%
Sep 9
Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to access proxy configuration
Affected: All versions, or not specified
CVE-2026-21072
7.8
0%
Aug 10
Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory
Affected: All versions, or not specified
CVE-2026-21071
7.8
0%
Aug 10
Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory
Affected: All versions, or not specified
CVE-2026-21069
7.8
0%
Aug 10
Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory
Affected: All versions, or not specified
CVE-2026-21068
7.8
0%
Aug 10
Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code
Affected: All versions, or not specified
CVE-2026-21067
7.8
0%
Aug 10
Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory
Affected: All versions, or not specified
Page 1 of 7 · 345 total
12…7