Skip to content

Known vulnerabilities in Samsung Mobile Devices

Is your version affected?

CVE Summary Score Published
CVE-2025-20893 Improper access control in NotificationManager prior to SMR Jan-2025 Release 1 allows local attackers to change the… 5.1 Medium Feb 4, 2025
CVE-2025-20892 Protection Mechanism Failure in bootloader prior to SMR Jan-2025 Release 1 allows physical attackers to allow to execute… 5.9 Medium Feb 4, 2025
CVE-2025-20891 Out-of-bounds read in decoding malformed bitstream of video thumbnails in libsthmbc.so prior to SMR Jan-2025 Release 1… 5.3 Medium Feb 4, 2025
CVE-2025-20890 Out-of-bounds write in decoding frame buffer in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to… 7.0 High Feb 4, 2025
CVE-2025-20889 Out-of-bounds read in decoding malformed bitstream for smp4vtd in libsthmbc.so prior to SMR Jan-2025 Release 1 allows… 5.3 Medium Feb 4, 2025
CVE-2025-20888 Out-of-bounds write in handling the block size for smp4vtd in libsthmbc.so prior to SMR Jan-2025 Release 1 allows… 7.0 High Feb 4, 2025
CVE-2025-20887 Out-of-bounds read in accessing table used for svp8t in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local… 5.3 Medium Feb 4, 2025
CVE-2025-20886 Inclusion of sensitive information in test code in softsim trustlet prior to SMR Jan-2025 Release 1 allows local… 4.1 Medium Feb 4, 2025
CVE-2025-20885 Out-of-bounds write in softsim trustlet prior to SMR Jan-2025 Release 1 allows local privileged attackers to cause… 6.4 Medium Feb 4, 2025
CVE-2025-20884 Improper access control in Samsung Message prior to SMR Jan-2025 Release 1 allows physical attackers to access data… 4.6 Medium Feb 4, 2025
CVE-2025-20883 Improper access control in SoundPicker prior to SMR Jan-2025 Release 1 allows physical attackers to access data across… 4.6 Medium Feb 4, 2025
CVE-2025-20882 Out-of-bounds write in accessing uninitialized memory for svc1td in libsthmbc.so prior to SMR Jan-2025 Release 1… 7.0 High Feb 4, 2025
CVE-2025-20881 Out-of-bounds write in accessing buffer storing the decoded video frames in libsthmbc.so prior to SMR Jan-2025 Release 1… 7.0 High Feb 4, 2025
CVE-2024-49422 Protection Mechanism Failure in bootloader prior to SMR Oct-2024 Release 1 allows physical attackers to reset lockscreen… 5.2 Medium Dec 31, 2024
CVE-2024-49415 Out-of-bound write in libsaped.so prior to SMR Dec-2024 Release 1 allows remote attackers to execute arbitrary code 8.1 High Dec 3, 2024
CVE-2024-49414 Authentication Bypass Using an Alternate Path in Dex Mode prior to SMR Dec-2024 Release 1 allows physical attackers to… 2.4 Low Dec 3, 2024
CVE-2024-49413 Improper Verification of Cryptographic Signature in SmartSwitch prior to SMR Dec-2024 Release 1 allows local attackers… 7.1 High Dec 3, 2024
CVE-2024-49412 Improper input validation in Settings prior to SMR Dec-2024 Release 1 allows local attackers to broadcast signal for… 5.5 Medium Dec 3, 2024
CVE-2024-49411 Path Traversal in ThemeCenter prior to SMR Dec-2024 Release 1 allows physical attackers to copy apk files to arbitrary… 4.3 Medium Dec 3, 2024
CVE-2024-49410 Out-of-bounds write in libswmfextractor.so prior to SMR Dec-2024 Release 1 allows local attackers to execute arbitrary… 5.9 Medium Dec 3, 2024
CVE-2024-49409 Out-of-bounds write in Battery Full Capacity node prior to Firmware update Sep-2024 Release on Galaxy S24 allows local… 6.4 Medium Nov 6, 2024
CVE-2024-49408 Out-of-bounds write in usb driver prior to Firmware update Sep-2024 Release on Galaxy S24 allows local attackers to… 6.4 Medium Nov 6, 2024
CVE-2024-49402 Improper input validation in Dressroom prior to SMR Nov-2024 Release 1 allow physical attackers to access data across… 4.6 Medium Nov 6, 2024
CVE-2024-49401 Improper input validation in Settings Suggestions prior to SMR Nov-2024 Release 1 allows local attackers to launch… 5.1 Medium Nov 6, 2024
CVE-2024-34682 Improper authorization in Settings prior to SMR Nov-2024 Release 1 allows physical attackers to access stored WiFi… 2.4 Low Nov 6, 2024

Other Samsung Mobile products