SM
Product
Samsung Mobile devices
On CISA KEVExploited in the wild
866
CVEs
13
On KEV
10.0
Max CVSS
14
New 30D
Severity mix
Critical 45High 275Medium 180Low 0
Watch
Add Samsung Mobile devices to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-30646 | 7.8 | Jul 6 | Heap out of bound write vulnerability in BroadcastSmsConfig of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code Affected: All versions, or not specified |
| CVE-2023-30645 | 7.8 | Jul 6 | Heap out of bound write vulnerability in IpcRxIncomingCBMsg of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code Affected: All versions, or not specified |
| CVE-2023-30644 | 7.8 | Jul 6 | Stack out of bound write vulnerability in CdmaSmsParser of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code Affected: All versions, or not specified |
| CVE-2023-21501 | 7.8 | May 4 | Improper input validation vulnerability in mPOS fiserve trustlet prior to SMR May-2023 Release 1 allows local attackers to execute arbitrary code Affected: Select Android 13 devices before SMR May-2023 Release 1 |
| CVE-2023-21484 | 7.8 | May 4 | Improper access control vulnerability in AppLock prior to SMR May-2023 Release 1 allows local attackers without proper permission to execute a privileged operation Affected: Android 11, 12, 13 before SMR May-2023 Release 1 |
| CVE-2023-21488 | 7.8 | May 4 | Improper access control vulnerablility in Tips prior to SMR May-2023 Release 1 allows local attackers to launch arbitrary activity in Tips Affected: Android 11, 12, 13 before SMR May-2023 Release 1 |
| CVE-2023-21491 | 7.8 | May 4 | Improper access control vulnerability in ThemeManager prior to SMR May-2023 Release 1 allows local attackers to write arbitrary files with system privilege Affected: Android 12, 13 before SMR May-2023 Release 1 |
| CVE-2023-21497 | 7.8 | May 4 | Use of externally-controlled format string vulnerability in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the memory address Affected: Select Android 13 devices before SMR May-2023 Release 1 |
| CVE-2023-21498 | 7.8 | May 4 | Improper input validation vulnerability in setPartnerTAInfo in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to overwrite the trustlet memory Affected: Select Android 13 devices before SMR May-2023 Release 1 |
| CVE-2023-21502 | 7.8 | May 4 | Improper input validation vulnerability in FactoryTest application prior to SMR May-2023 Release 1 allows local attackers to get privilege escalation via debugging commands Affected: Android 12, 13 before SMR May-2023 Release 1 |
| CVE-2023-21499 | 7.8 | May 4 | Out-of-bounds write vulnerability in TA_Communication_mpos_encrypt_pin in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to execute arbitrary code Affected: Select Android 13 devices before SMR May-2023 Release 1 |
| CVE-2023-21451 | 7.8 | Feb 9 | A Stack-based overflow vulnerability in IpcRxEmbmsSessionList in SECRIL prior to Android S(12) allows attacker to cause memory corruptions Affected: before Android S(12) |
| CVE-2023-21420 | 7.8 | Feb 9 | Use of Externally-Controlled Format String vulnerabilities in STST TA prior to SMR Jan-2023 Release 1 allows arbitrary code execution Affected: Q(10), R(11) devices with Teegris before SMR Jan-2023 Release 1 |
| CVE-2023-21421 | 7.8 | Feb 9 | Improper Handling of Insufficient Permissions or Privileges vulnerability in KnoxCustomManagerService prior to SMR Jan-2023 Release 1 allows attacker to access device SIM PIN Affected: Q(10), R(11), S(12), T(13) before SMR Jan-2023 Release 1 |
| CVE-2023-21430 | 7.8 | Feb 9 | An out-of-bound read vulnerability in mapToBuffer function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR JAN-2023 Release 1 allows attacker to cause memory… Affected: Q(10), R(11), S(12), T(13) before SMR Jan-2023 Release 1 |
| CVE-2023-21439 | 7.8 | Feb 9 | Improper input validation vulnerability in UwbDataTxStatusEvent prior to SMR Feb-2023 Release 1 allows attackers to launch certain activities Affected: S(12), T(13) before SMR Feb-2023 Release 1 |
| CVE-2022-39907 | 7.8 | Dec 8 | Integer overflow vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attacker to perform Out-Of-Bounds Write Affected: Q(10) and R(11) OS with libsadapter, S(12) and T(13) OS with libsthmbcadapter before SMR Dec-2022 Release 1 |
| CVE-2022-39883 | 7.8 | Nov 9 | Improper authorization vulnerability in StorageManagerService prior to SMR Nov-2022 Release 1 allows local attacker to call privileged API Affected: Q(10), R(11), S(12) before SMR Nov-2022 Release 1 |
| CVE-2022-39882 | 7.8 | Nov 9 | Heap overflow vulnerability in sflacf_fal_bytes_peek function in libsmat.so library prior to SMR Nov-2022 Release 1 allows local attacker to execute arbitrary code Affected: Q(10), R(11), S(12) before SMR Nov-2022 Release 1 |
| CVE-2022-39880 | 7.8 | Nov 9 | Improper input validation vulnerability in DualOutFocusViewer prior to SMR Nov-2022 Release 1 allows local attacker to perform an arbitrary code execution Affected: R(11), S(12) before SMR Nov-2022 Release 1 |
| CVE-2022-39853 | 7.8 | Oct 7 | A use after free vulnerability in perf-mgr driver prior to SMR Oct-2022 Release 1 allows attacker to cause memory access fault Affected: Q(10), R(11), S(12) devices with Qualcomm SM8150 and SM8250 chipsets before SMR Oct-2022 Release 1 |
| CVE-2022-39852 | 7.8 | Oct 7 | A heap-based overflow vulnerability in makeContactAGIF in libagifencoder.quram.so library prior to SMR Oct-2022 Release 1 allows attacker to perform code execution Affected: Q(10), R(11), S(12) before SMR Oct-2022 Release 1 |
| CVE-2022-39854 | 7.8 | Oct 7 | Improper protection in IOMMU prior to SMR Oct-2022 Release 1 allows unauthorized access to secure memory Affected: Q(10), R(11), S(12) before SMR Oct-2022 Release 1 |
| CVE-2022-36855 | 7.8 | Sep 9 | A use after free vulnerability in iva_ctl driver prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault Affected: Q(10), R(11), S(12) devices with exynos9810 and exynos9820 chipsets before SMR Sep-2022 Release 1 |
| CVE-2022-36858 | 7.8 | Sep 9 | A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc() function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker… Affected: Q(10), R(11), S(12) before SMR Sep-2022 Release 1 |
| CVE-2022-36846 | 7.8 | Sep 9 | A heap-based overflow vulnerability in ConstructDictionary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause… Affected: Q(10), R(11), S(12) before SMR Sep-2022 Release 1 |
| CVE-2022-36863 | 7.8 | Sep 9 | A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker… Affected: Q(10), R(11), S(12) before SMR Sep-2022 Release 1 |
| CVE-2022-36862 | 7.8 | Sep 9 | A heap-based overflow vulnerability in HWR::EngineCJK::Impl::Construct() in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to… Affected: Q(10), R(11), S(12) before SMR Sep-2022 Release 1 |
| CVE-2022-36842 | 7.8 | Sep 9 | A heap-based overflow vulnerability in prepareRecogLibrary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause… Affected: Q(10), R(11), S(12) before SMR Sep-2022 Release 1 |
| CVE-2022-36843 | 7.8 | Sep 9 | A heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause… Affected: Q(10), R(11), S(12) before SMR Sep-2022 Release 1 |
| CVE-2022-36844 | 7.8 | Sep 9 | A heap-based overflow vulnerability in HWR::EngJudgeModel::Construct() in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause… Affected: Q(10), R(11), S(12) before SMR Sep-2022 Release 1 |
| CVE-2022-36860 | 7.8 | Sep 9 | A heap-based overflow vulnerability in LoadEnvironment function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory… Affected: Q(10), R(11), S(12) before SMR Sep-2022 Release 1 |
| CVE-2022-36841 | 7.8 | Sep 9 | A heap-based overflow vulnerability in PrepareRecogLibrary_Part function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to… Affected: Q(10), R(11), S(12) before SMR Sep-2022 Release 1 |
| CVE-2022-36845 | 7.8 | Sep 9 | A heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause… Affected: Q(10), R(11), S(12) before SMR Sep-2022 Release 1 |
| CVE-2022-36847 | 7.8 | Sep 9 | Use after free vulnerability in mtp_send_signal function of MTP driver prior to SMR Sep-2022 Release 1 allows attackers to perform malicious actions Affected: Q(10), R(11) before SMR Sep-2022 Release 1 |
| CVE-2022-36849 | 7.8 | Sep 9 | Use after free vulnerability in sdp_mm_set_process_sensitive function of sdpmm driver prior to SMR Sep-2022 Release 1 allows attackers to perform malicious actions Affected: Q(10), R(11), S(12) before SMR Sep-2022 Release 1 |
| CVE-2022-33704 | 7.8 | Jul 11 | Improper validation vulnerability in ucmRetParcelable of KnoxSDK prior to SMR Jul-2022 Release 1 allows attackers to launch certain activities Affected: Q(10), R(11), S(12) before SMR Jul-2022 Release 1 |
| CVE-2022-33703 | 7.8 | Jul 11 | Improper validation vulnerability in CACertificateInfo prior to SMR Jul-2022 Release 1 allows attackers to launch certain activities Affected: Q(10), R(11), S(12) before SMR Jul-2022 Release 1 |
| CVE-2022-33695 | 7.8 | Jul 11 | Use of improper permission in InputManagerService prior to SMR Jul-2022 Release 1 allows unauthorized access to the service Affected: Q(10), R(11), S(12) before SMR Jul-2022 Release 1 |
| CVE-2022-30756 | 7.8 | Jul 11 | Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of Finder Affected: Q(10), R(11), S(12) before SMR Jul-2022 Release 1 |
| CVE-2022-30755 | 7.8 | Jul 11 | Improper authentication vulnerability in AppLock prior to SMR Jul-2022 Release 1 allows attacker to bypass password confirm activity by hijacking the implicit intent Affected: Q(10), R(11), S(12) before SMR Jul-2022 Release 1 |
| CVE-2022-30754 | 7.8 | Jul 11 | Implicit Intent hijacking vulnerability in AppLinker prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of AppLinker Affected: Q(10), R(11), S(12) before SMR Jul-2022 Release 1 |
| CVE-2022-30726 | 7.8 | Jun 7 | Unprotected component vulnerability in DeviceSearchTrampoline in SecSettingsIntelligence prior to SMR Jun-2022 Release 1 allows local attackers to launch activities of… Affected: S(12) before SMR Jun-2022 Release 1 |
| CVE-2022-27836 | 7.8 | Apr 11 | Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1 allow local attackers to access arbitrary… Affected: S(12) before SMR Apr-2022 Release 1 |
| CVE-2022-27835 | 7.8 | Apr 11 | Improper boundary check in UWB firmware prior to SMR Apr-2022 Release 1 allows arbitrary memory write Affected: S(12) before SMR Apr-2022 Release 1 |
| CVE-2022-27833 | 7.8 | Apr 11 | Improper input validation in DSP driver prior to SMR Apr-2022 Release 1 allows out-of-bounds write by integer overflow Affected: O(10), R(11), S(12) before SMR Apr-2022 Release 1 |
| CVE-2022-27830 | 7.8 | Apr 11 | Improper validation vulnerability in SemBlurInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities Affected: S(12) before SMR Apr-2022 Release 1 |
| CVE-2022-27829 | 7.8 | Apr 11 | Improper validation vulnerability in VerifyCredentialResponse prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities Affected: S(12) before SMR Apr-2022 Release 1 |
| CVE-2022-27828 | 7.8 | Apr 11 | Improper validation vulnerability in MediaMonitorEvent prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities Affected: O(10), R(11), S(12) before SMR Apr-2022 Release 1 |
| CVE-2022-27826 | 7.8 | Apr 11 | Improper validation vulnerability in SemSuspendDialogInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities Affected: O(10), R(11), S(12) before SMR Apr-2022 Release 1 |
The 500 most important CVEs for this product (exploited first, then by severity)