Veille CVE

Recherche « Samsung android »

73 CVE

  1. CVE-2026-21127 6.9 Moyenne

    Samsung Mobile Samsung Account

    Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data.

  2. CVE-2026-21113 5.5 Moyenne

    Samsung Mobile Visual Voicemail · Samsung visual voicemail

    Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission.

  3. CVE-2026-21112 5.5 Moyenne

    Samsung Mobile Samsung Tips · Samsung android

    Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability.

  4. CVE-2026-21109 2.1 Faible

    Samsung Mobile Watch Plugin

    Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information.

  5. CVE-2026-21108 5.5 Moyenne

    Samsung Mobile Bixby Touch · Samsung bixby

    Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information.

  6. CVE-2026-21105 5.5 Moyenne

    Samsung Mobile Collection · Samsung collection

    Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information.

  7. CVE-2026-21104 6.7 Moyenne

    Samsung Mobile Devices · Samsung android

    Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code.

  8. CVE-2026-21103 6.1 Moyenne

    Samsung Mobile Devices · Samsung android

    Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.

  9. CVE-2026-21102 6.7 Moyenne

    Samsung Mobile Devices · Samsung android

    Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.

  10. CVE-2026-21101 6.7 Moyenne

    Samsung Mobile Devices · Samsung android

    Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege.

  11. CVE-2026-21100 7.1 Élevée

    Samsung Mobile Devices · Samsung android

    Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity.

  12. CVE-2026-21099 5.5 Moyenne

    Samsung Mobile Devices · Samsung android

    Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information.

  13. CVE-2026-21098 6.1 Moyenne

    Samsung Mobile Devices · Samsung android

    Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction.

  14. CVE-2026-21097 6.7 Moyenne

    Samsung Mobile Devices · Samsung android

    Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity.

  15. CVE-2026-21096 9.8 Critique

    Samsung Mobile Devices · Samsung android

    Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.

  16. CVE-2026-21095 9.8 Critique

    Samsung Mobile Devices · Samsung android

    Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.

  17. CVE-2026-21094 8.8 Élevée

    Samsung Mobile Devices · Samsung android

    Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory.

  18. CVE-2026-21093 6.7 Moyenne

    Samsung Mobile Devices · Samsung android

    Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.

  19. CVE-2026-21092 5.3 Moyenne

    Samsung Mobile Devices · Samsung android

    Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege.

  20. CVE-2026-21091 7.8 Élevée

    Samsung Mobile Devices · Samsung android

    Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.

  21. CVE-2026-21090 7.8 Élevée

    Samsung Mobile Devices · Samsung android

    Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.

  22. CVE-2026-21089 7.8 Élevée

    Samsung Mobile Devices · Samsung android

    Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.

  23. CVE-2026-21088 7.8 Élevée

    Samsung Mobile Devices · Samsung android

    Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.

  24. CVE-2026-21087 7.8 Élevée

    Samsung Mobile Devices · Samsung android

    Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege.

  25. CVE-2026-21086 7.8 Élevée

    Samsung Mobile Devices · Samsung android

    Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to access proxy configuration.

  26. CVE-2026-21085 6.7 Moyenne

    Samsung Mobile Devices · Samsung android

    Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.

  27. CVE-2026-21081 5.1 Moyenne

    Samsung Mobile SamsungPassAutofill

    Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.

  28. CVE-2026-21073 6.1 Moyenne

    Samsung Mobile Devices · Samsung android

    Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity.

  29. CVE-2026-21072 7.8 Élevée

    Samsung Mobile Devices · Samsung android

    Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

  30. CVE-2026-21071 7.8 Élevée

    Samsung Mobile Devices · Samsung android

    Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

  31. CVE-2026-21070 4.6 Moyenne

    Samsung Mobile Devices · Samsung android

    Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information.

  32. CVE-2026-21069 7.8 Élevée

    Samsung Mobile Devices · Samsung android

    Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

  33. CVE-2026-21068 7.8 Élevée

    Samsung Mobile Devices · Samsung android

    Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code.

  34. CVE-2026-21067 7.8 Élevée

    Samsung Mobile Devices · Samsung android

    Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

  35. CVE-2026-21066 7.8 Élevée

    Samsung Mobile Devices · Samsung android

    Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

  36. CVE-2026-21065 7.8 Élevée

    Samsung Mobile Devices · Samsung android

    Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

  37. CVE-2026-21064 5.5 Moyenne

    Samsung Mobile Devices · Samsung android

    Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability.

  38. CVE-2026-21063 6.1 Moyenne

    Samsung Mobile Devices · Samsung android

    Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function.

  39. CVE-2026-21062 3.3 Faible

    Samsung Mobile Devices · Samsung android

    Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.

  40. CVE-2026-21061 6.5 Moyenne

    Samsung Mobile Devices · Samsung android

    Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction is required for triggering this vulnerability.

  41. CVE-2026-21060 4.6 Moyenne

    Samsung Mobile Devices · Samsung android

    Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles.

  42. CVE-2026-21059 7.1 Élevée

    Samsung Mobile Devices · Samsung android

    Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.

  43. CVE-2026-21058 7.1 Élevée

    Samsung Mobile Devices · Samsung android

    Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.

  44. CVE-2026-21055 8.5 Élevée

    Samsung Mobile Bixby

    Improper export of android application components in Bixby prior to version 4.0.70.8 allows local attackers to execute arbitrary commands with Bixby privilege.

  45. CVE-2026-21054 6.9 Moyenne

    Samsung Mobile InputSharing

    Improper export of android application components in InputSharing prior to version 2.7.01.4 allows local attackers to access sharing data.

  46. CVE-2026-21038 5.5 Moyenne

    Samsung Mobile Samsung Android USB Driver for Windows · Samsung android usb driver

    Improper input validation in Samsung Android USB Driver for Windows prior to version 1.9.5.0 allows local attacker to access out-of-bounds memory.

  47. CVE-2026-21034 3.3 Faible

    Samsung Mobile Samsung Auto · Samsung auto

    Improper export of android application components in Samsung Auto prior to version 3.1.2.61 in Android 15 and 3.2.0.38 in Android 16 allows local attacker to change audio configuration.

  48. CVE-2026-21033 7.1 Élevée

    Samsung Mobile Samsung Assistant · Samsung assistant

    Improper export of android application components in ExpressHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script.

  49. CVE-2026-21032 7.1 Élevée

    Samsung Mobile Samsung Assistant · Samsung assistant

    Improper export of android application components in SmartHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script.

  50. CVE-2026-21031 7.8 Élevée

    Samsung Mobile Devices · Samsung android

    Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. User interaction is required for triggering this vulnerability.

  51. CVE-2026-21030 7.8 Élevée

    Samsung Mobile Devices · Samsung android

    Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger privileged functions.

  52. CVE-2026-21029 7.8 Élevée

    Samsung Mobile Devices · Samsung android

    Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 allows local attacker to execute privileged operations.

  53. CVE-2026-21028 5.5 Moyenne

    Samsung Mobile Devices · Samsung android

    Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.

  54. CVE-2026-21027 3.3 Faible

    Samsung Mobile Devices · Samsung android

    Improper export of android application components in ImsSettings prior to SMR Jun-2026 Release 1 allows local attackers to trigger logging function.

  55. CVE-2026-21026 5.5 Moyenne

    Samsung Mobile Devices · Samsung android

    Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attackers to access to sensitive information.

  56. CVE-2026-21025 5.5 Moyenne

    Samsung Mobile Devices · Samsung android

    Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.

  57. CVE-2026-21017 5.5 Moyenne

    Samsung Mobile Devices · Samsung android

    Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attackers to access privileged files.

  58. CVE-2026-21022 5.5 Moyenne

    Samsung Mobile Devices · Samsung android

    Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.

  59. CVE-2026-21021 6.8 Moyenne

    Samsung Mobile Devices · Samsung android

    Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity.

  60. CVE-2026-21020 7.8 Élevée

    Samsung Mobile Devices · Samsung android

    Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers to trigger privileged functions.

  61. CVE-2026-21018 6.7 Moyenne

    Samsung Mobile Devices · Samsung android

    Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary code.

  62. CVE-2026-21016 5.5 Moyenne

    Samsung Mobile Devices · Samsung android

    Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.

  63. CVE-2026-21015 5.5 Moyenne

    Samsung Mobile Devices · Samsung android

    Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local attacker to access unique identifier.

  64. CVE-2026-3291 5.5 Moyenne

    HP, Inc Samsung Print Service Plugin · Hp samsung print service plugin

    Samsung Print Service Plugin for Android is potentially vulnerable to information disclosure when using an outdated version of the application via mobile devices. HP is releasing updates to mitigate these potential vulnerabilities.

  65. CVE-2026-21023 5.5 Moyenne

    Samsung Mobile Devices · Samsung android

    Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the installation restriction of specific application.

  66. CVE-2025-21043 9.8 Critique Exploitée

    Samsung Mobile Devices · Samsung android

    Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.

  67. CVE-2023-21492 4.4 Moyenne Exploitée

    Samsung Mobile Devices · Samsung android

    Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.

  68. CVE-2021-25489 5.5 Moyenne Exploitée

    Samsung Mobile Devices · Samsung android

    Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic.

  69. CVE-2021-25487 7.8 Élevée Exploitée

    Samsung Mobile Devices · Samsung android

    Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer.

  70. CVE-2021-25395 6.4 Moyenne Exploitée

    Samsung Mobile Devices · Samsung android

    A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.

  71. CVE-2021-25394 6.4 Moyenne Exploitée

    Samsung Mobile Devices · Samsung android

    A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised.

  72. CVE-2021-25372 6.7 Moyenne Exploitée

    Samsung Mobile Devices · Samsung android

    An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.

  73. CVE-2021-25371 6.7 Moyenne Exploitée

    Samsung Mobile Devices · Samsung android

    A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.