CVE-2022-22265 Samsung Mobile Devices Use-After-Free Vulnerability

Active exploitation observed

· CISA KEV catalogue

Required action Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Ransomware campaigns Not observed so far

Weakness CWE-703

Description

An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.

Affected products and versions

Product	Affected versions	Fixed in
Samsung Mobile Devices	Versions not published

Other CVEs of Samsung Mobile Devices

The 866 CVEs of Samsung Mobile Devices →

CVE-2026-21126 Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1… 6.9 Medium CVE-2026-21125 Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1… 8.6 High CVE-2026-21124 Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1… 8.6 High CVE-2026-21123 Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with… 6.7 Medium