Skip to content

Known vulnerabilities in Samsung Mobile Devices

Is your version affected?

CVE Summary Score Published
CVE-2025-21049 Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive… 5.5 Medium Oct 10, 2025
CVE-2025-21048 Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to execute arbitrary… 6.7 Medium Oct 10, 2025
CVE-2025-21047 Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged… 5.2 Medium Oct 10, 2025
CVE-2025-21046 Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to… 2.4 Low Oct 10, 2025
CVE-2025-21045 Insecure storage of sensitive information in Galaxy Watch prior to SMR Oct-2025 Release 1 allows local attackers to… 4.0 Medium Oct 10, 2025
CVE-2025-21044 Out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write… 5.7 Medium Oct 10, 2025
CVE-2025-21043 Exploited Samsung Mobile Devices Out-of-Bounds Write Vulnerability 8.8 High Sep 12, 2025
CVE-2025-21042 Exploited Samsung Mobile Devices Out-of-Bounds Write Vulnerability 8.8 High Sep 12, 2025
CVE-2022-39888 Improper access control vulnerability in retrieveExternalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows… 4.3 Medium Sep 4, 2025
CVE-2025-21034 Out-of-bounds write in libsavsvc.so prior to SMR Sep-2025 Release 1 allows local attackers to potentially execute… 4.0 Medium Sep 3, 2025
CVE-2025-21033 Improper access control in ContactProvider prior to SMR Sep-2025 Release 1 allows local attackers to access sensitive… 4.0 Medium Sep 3, 2025
CVE-2025-21032 Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode… 5.9 Medium Sep 3, 2025
CVE-2025-21031 Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs 6.8 Medium Sep 3, 2025
CVE-2025-21030 Improper handling of insufficient permission in AppPrelaunchManagerService prior to SMR Sep-2025 Release 1 in Chinese… 4.3 Medium Sep 3, 2025
CVE-2025-21029 Improper handling of insufficient permission in System UI prior to SMR Sep-2025 Release 1 allows local attackers to send… 4.0 Medium Sep 3, 2025
CVE-2025-21028 Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse… 5.5 Medium Sep 3, 2025
CVE-2025-21027 Improper verification of intent by broadcast receiver in ImsService prior to SMR Sep-2025 Release 1 allows local… 5.1 Medium Sep 3, 2025
CVE-2025-21026 Improper handling of insufficient permission in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to… 4.0 Medium Sep 3, 2025
CVE-2025-21025 Improper access control in MARsExemptionManager prior to SMR Sep-2025 Release 1 allows local attackers to be excluded… 5.1 Medium Sep 3, 2025
CVE-2023-21474 Intent redirection vulnerability in SecSettings prior to SMR Apr-2022 Release 1 allows attackers to access arbitrary… 6.3 Medium Sep 3, 2025
CVE-2023-21480 Improper input validation vulnerability in CertByte prior to SMR Apr-2023 Release 1 allows local attackers to launch… 8.5 High Sep 3, 2025
CVE-2023-21479 Improper authorization in Smart suggestions prior to SMR Apr-2023 Release 1 in Android 13 and 4.1.01.0 in Android 12… 5.3 Medium Sep 3, 2025
CVE-2023-21478 Improper input validation vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to… 6.0 Medium Sep 3, 2025
CVE-2023-21477 Access of Memory Location After End of Buffer vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows… 7.9 High Sep 3, 2025
CVE-2023-21476 Out-of-bounds Write vulnerability in libaudiosaplus_sec.so library prior to SMR Apr-2023 Release 1 allows local attacker… 8.0 High Sep 3, 2025

Other Samsung Mobile products