SM
Product
Samsung Mobile Devices
On CISA KEVExploited in the wild
557
CVEs
13
On KEV
9.8
Max CVSS
14
New 30D
Severity mix
Critical 14High 192Medium 276Low 18
Watch
Add Samsung Mobile Devices to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-25372 In wildKEV | 6.7 | Mar 26 | Samsung Mobile Devices Improper Boundary Check Vulnerability Affected: Q(10.0), R(11.0) devices with exynos980, exynos2100, exynos9830 before SMR Mar-2021 Release 1 |
| CVE-2021-25371 In wildKEV | 6.7 | Mar 26 | Samsung Mobile Devices Unspecified Vulnerability Affected: Q(10.0), R(11.0) devices with exynos980, exynos2100, exynos9830 before SMR Mar-2021 Release 1 |
| CVE-2021-25395 In wildKEV | 6.4 | Jun 11 | Samsung Mobile Devices Race Condition Vulnerability Affected: O(8.x), P(9.0), Q(10.0), R(11.0) before SMR MAY-2021 Release 1 |
| CVE-2021-25394 In wildKEV | 6.4 | Jun 11 | Samsung Mobile Devices Race Condition Vulnerability Affected: O(8.x), P(9.0), Q(10.0), R(11.0) before SMR MAY-2021 Release 1 |
| CVE-2021-25489 In wildKEV | 5.5 | Oct 6 | Samsung Mobile Devices Improper Input Validation Vulnerability Affected: O(8.1), P(9.0), Q(10.0), R(11.0) before SMR Oct-2021 Release 1 |
| CVE-2021-25369 In wildKEV | 5.5 | Mar 26 | Samsung Mobile Devices Improper Access Control Vulnerability Affected: O(8.x), P(9.0), Q(10.0) before SMR Mar-2021 Release 1 |
| CVE-2023-21492 In wildKEV | 4.4 | May 4 | Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability Affected: Selected Android 11, 12, 13 devices before SMR May-2023 Release 1 |
| CVE-2021-25370 In wildKEV | 4.4 | Mar 26 | Samsung Mobile Devices Memory Corruption Vulnerability Affected: Selected O(8.X), P(9.0), Q(10.0), R(11.0) before SMR Mar-2021 Release 1 |
| CVE-2026-21126 | 6.9 | Oct 12 | Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2026-21121 | 6.9 | Oct 12 | Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs Affected: All versions, or not specified |
| CVE-2026-21118 | 6.9 | Oct 12 | Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage Affected: All versions, or not specified |
| CVE-2026-21140 | 6.9 | Oct 2 | Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications Affected: All versions, or not specified |
| CVE-2026-21041 | 6.9 | Jul 10 | Improper access control in SamsungSEAgentService prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information Affected: All versions, or not specified |
| CVE-2026-21040 | 6.9 | Jul 10 | Improper access control in IAFDService prior to SMR Jul-2026 Release 1 allows local privileged attackers to use the privileged APIs Affected: All versions, or not specified |
| CVE-2026-21039 | 6.9 | Jul 10 | Improper access control in Settings prior to SMR Jul-2026 Release 1 allows local attackers to configure Theft protection settings Affected: All versions, or not specified |
| CVE-2026-21052 | 6.8 | Jul 10 | Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system privilege Affected: All versions, or not specified |
| CVE-2026-21021 | 6.8 | May 13 | Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity Affected: All versions, or not specified |
| CVE-2026-21011 | 6.8 | Apr 13 | Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock Affected: All versions, or not specified |
| CVE-2026-21009 | 6.8 | Apr 13 | Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass App Pinning Affected: All versions, or not specified |
| CVE-2026-21007 | 6.8 | Apr 13 | Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Knox Guard Affected: All versions, or not specified |
| CVE-2026-21003 | 6.8 | Apr 13 | Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the restrictions Affected: All versions, or not specified |
| CVE-2026-20980 | 6.8 | Feb 4 | Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker to execute arbitrary commands Affected: All versions, or not specified |
| CVE-2025-21047 | 6.8 | Oct 10 | Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs Affected: All versions, or not specified |
| CVE-2025-21032 | 6.8 | Sep 3 | Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions Affected: All versions, or not specified |
| CVE-2025-21031 | 6.8 | Sep 3 | Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs Affected: All versions, or not specified |
| CVE-2023-21473 | 6.8 | Sep 3 | Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader Affected: All versions, or not specified |
| CVE-2023-21472 | 6.8 | Sep 3 | Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader Affected: All versions, or not specified |
| CVE-2025-20993 | 6.8 | Jun 4 | Out-of-bounds write in libsecimaging.camera.samsung.so prior to SMR Jun-2025 Release 1 allows local attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2024-34587 | 6.8 | Jul 2 | Improper input validation in parsing application information from RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with… Affected: All versions, or not specified |
| CVE-2024-20880 | 6.8 | Jun 4 | Stack-based buffer overflow vulnerability in bootloader prior to SMR Jun-2024 Release 1 allows physical attackers to overwrite memory Affected: All versions, or not specified |
| CVE-2024-20865 | 6.8 | May 7 | Authentication bypass in bootloader prior to SMR May-2024 Release 1 allows physical attackers to flash arbitrary images Affected: All versions, or not specified |
| CVE-2023-42561 | 6.8 | Dec 5 | Heap out-of-bounds write vulnerability in bootloader prior to SMR Dec-2023 Release 1 allows a physical attacker to execute arbitrary code Affected: All versions, or not specified |
| CVE-2023-42533 | 6.8 | Nov 7 | Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execute arbitrary code in Kernel Affected: All versions, or not specified |
| CVE-2023-21513 | 6.8 | Jun 28 | Improper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows physical attackers to manipulate device to operate in way that results in unexpected… Affected: Android 11, 12, 13 before SMR Jun-2023 Release 1 |
| CVE-2023-21489 | 6.8 | May 4 | Heap out-of-bounds write vulnerability in bootloader prior to SMR May-2023 Release 1 allows a physical attacker to execute arbitrary code Affected: Selected Android 11, 12, 13 Qualcomm devices before SMR May-2023 Release 1 |
| CVE-2022-33730 | 6.8 | Aug 5 | Heap-based buffer overflow vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows arbitrary code execution by physical attackers Affected: S(12) before SMR Aug-2022 Release 1 |
| CVE-2026-21123 | 6.7 | Oct 12 | Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before… Affected: All versions, or not specified |
| CVE-2026-21104 | 6.7 | Sep 9 | Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code Affected: All versions, or not specified |
| CVE-2026-21102 | 6.7 | Sep 9 | Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege Affected: All versions, or not specified |
| CVE-2026-21101 | 6.7 | Sep 9 | Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege Affected: All versions, or not specified |
| CVE-2026-21097 | 6.7 | Sep 9 | Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity Affected: All versions, or not specified |
| CVE-2026-21093 | 6.7 | Sep 9 | Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2026-21085 | 6.7 | Sep 9 | Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2026-21043 | 6.7 | Jul 10 | Path traversal in Wallpaper service prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system server privilege Affected: All versions, or not specified |
| CVE-2026-21018 | 6.7 | May 13 | Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary code Affected: All versions, or not specified |
| CVE-2026-20968 | 6.7 | Jan 9 | Use after free in DualDAR prior to SMR Jan-2026 Release 1 allows local privileged attackers to execute arbitrary code Affected: All versions, or not specified |
| CVE-2025-20983 | 6.7 | Jul 8 | Out-of-bounds write in checking auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2025-20982 | 6.7 | Jul 8 | Out-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2025-20987 | 6.7 | Jun 4 | Improper access control in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a auth_token Affected: All versions, or not specified |
| CVE-2025-20937 | 6.7 | May 7 | Out-of-bounds write in Keymaster trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to write out-of-bounds memory Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)
