Skip to content

Known vulnerabilities in Samsung Mobile Devices

Is your version affected?

CVE Summary Score Published
CVE-2021-25484 Improper authentication in InputManagerService prior to SMR Oct-2021 Release 1 allows monitoring the touch event 4.0 Medium Oct 6, 2021
CVE-2021-25483 Lack of boundary checking of a buffer in livfivextractor library prior to SMR Oct-2021 Release 1 allows OOB read 4.0 Medium Oct 6, 2021
CVE-2021-25482 SQL injection vulnerabilities in CMFA framework prior to SMR Oct-2021 Release 1 allow untrusted application to overwrite… 5.9 Medium Oct 6, 2021
CVE-2021-25481 An improper error handling in Exynos CP booting driver prior to SMR Oct-2021 Release 1 allows local attackers to… 6.4 Medium Oct 6, 2021
CVE-2021-25480 A lack of replay attack protection in GUTI REALLOCATION COMMAND message process in Qualcomm modem prior to SMR… 4.4 Medium Oct 6, 2021
CVE-2021-25479 A possible heap-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows… 7.2 High Oct 6, 2021
CVE-2021-25478 A possible stack-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows… 7.2 High Oct 6, 2021
CVE-2021-25477 An improper error handling in Mediatek RRC Protocol stack prior to SMR Oct-2021 Release 1 allows modem crash and… 4.4 Medium Oct 6, 2021
CVE-2021-25476 An information disclosure vulnerability in Widevine TA log prior to SMR Oct-2021 Release 1 allows attackers to bypass… 4.1 Medium Oct 6, 2021
CVE-2021-25475 A possible heap-based buffer overflow vulnerability in DSP kernel driver prior to SMR Oct-2021 Release 1 allows… 3.9 Low Oct 6, 2021
CVE-2021-25474 Assuming a shell privilege is gained, an improper exception handling for multi_sim_bar_show_on_qspanel value in SystemUI… 4.4 Medium Oct 6, 2021
CVE-2021-25473 Assuming a shell privilege is gained, an improper exception handling for multi_sim_bar_hide_by_meadia_full value in… 4.4 Medium Oct 6, 2021
CVE-2021-25472 An improper access control vulnerability in BluetoothSettingsProvider prior to SMR Oct-2021 Release 1 allows untrusted… 4.0 Medium Oct 6, 2021
CVE-2021-25471 A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial… 3.7 Low Oct 6, 2021
CVE-2021-25470 An improper caller check logic of SMC call in TEEGRIS secure OS prior to SMR Oct-2021 Release 1 can be used to… 7.9 High Oct 6, 2021
CVE-2021-25469 A possible stack-based buffer overflow vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows… 6.0 Medium Oct 6, 2021
CVE-2021-25468 A possible guessing and confirming a byte memory vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1… 4.4 Medium Oct 6, 2021
CVE-2021-25467 Assuming system privilege is gained, possible buffer overflow vulnerabilities in the Vision DSP kernel driver prior to… 5.3 Medium Oct 6, 2021
CVE-2021-25462 NULL pointer dereference vulnerability in NPU driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory… 3.3 Low Sep 9, 2021
CVE-2021-25461 An improper length check in APAService prior to SMR Sep-2021 Release 1 results in stack based Buffer Overflow 4.0 Medium Sep 9, 2021
CVE-2021-25460 An improper access control vulnerability in sspExit() in BlockchainTZService prior to SMR Sep-2021 Release 1 allows… 4.0 Medium Sep 9, 2021
CVE-2021-25459 An improper access control vulnerability in sspInit() in BlockchainTZService prior to SMR Sep-2021 Release 1 allows… 4.0 Medium Sep 9, 2021
CVE-2021-25458 NULL pointer dereference vulnerability in ION driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory… 3.3 Low Sep 9, 2021
CVE-2021-25457 An improper input validation vulnerability in DSP driver prior to SMR Sep-2021 Release 1 allows local attackers to get a… 5.9 Medium Sep 9, 2021
CVE-2021-25456 OOB read vulnerability in libswmfextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute memcpy… 5.5 Medium Sep 9, 2021

Other Samsung Mobile products