Vulnerabilities (CVE)

Filtered by vendor Samsung Subscribe
Total 1631 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-34682 1 Samsung 1 Android 2026-06-17 N/A 2.4 LOW
Improper authorization in Settings prior to SMR Nov-2024 Release 1 allows physical attackers to access stored WiFi password in Maintenance Mode.
CVE-2024-34680 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Use of implicit intent for sensitive communication in WlanTest prior to SMR Nov-2024 Release 1 allows local attackers to get sensitive information.
CVE-2024-34679 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone privilege.
CVE-2024-34678 1 Samsung 1 Android 2026-06-17 N/A 5.9 MEDIUM
Out-of-bounds write in libsapeextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption.
CVE-2024-34677 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Exposure of sensitive information in System UI prior to SMR Nov-2024 Release 1 allow local attackers to make malicious apps appear as legitimate.
CVE-2024-34676 1 Samsung 1 Android 2026-06-17 N/A 4.4 MEDIUM
Out-of-bounds write in parsing subtitle file in libsubextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption. User interaction is required for triggering this vulnerability.
CVE-2024-34675 1 Samsung 1 Android 2026-06-17 N/A 2.4 LOW
Improper access control in Dex Mode prior to SMR Nov-2024 Release 1 allows physical attackers to temporarily access to unlocked screen.
CVE-2024-34674 1 Samsung 1 Android 2026-06-17 N/A 4.6 MEDIUM
Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across multiple user profiles.
CVE-2024-34673 1 Samsung 1 Android 2026-06-17 N/A 4.1 MEDIUM
Improper Input Validation in IpcProtocol in Modem prior to SMR Nov-2024 Release 1 allows local attackers to cause Denial-of-Service.
CVE-2024-34672 1 Samsung 2 Android, Video Player 2026-06-17 N/A 5.5 MEDIUM
Improper input validation in SamsungVideoPlayer prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.3.41.230 in Android 14 allows local attackers to access video file of other users.
CVE-2024-34671 1 Samsung 1 Internet 2026-06-17 N/A 3.3 LOW
Use of implicit intent for sensitive communication in translation혻in Samsung Internet prior to version 26.0.3.1 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability.
CVE-2024-34670 1 Samsung 1 Sound Assistant 2026-06-17 N/A 4.0 MEDIUM
Use of implicit intent for sensitive communication in Sound Assistant prior to version 6.1.0.9 allows local attackers to get sensitive information.
CVE-2024-34669 1 Samsung 1 Android 2026-06-17 N/A 7.5 HIGH
Out-of-bounds write in parsing h.263+ format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.
CVE-2024-34668 1 Samsung 1 Android 2026-06-17 N/A 7.5 HIGH
Out-of-bounds write in parsing h.263 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.
CVE-2024-34667 1 Samsung 1 Android 2026-06-17 N/A 7.5 HIGH
Out-of-bounds write in parsing h.265 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.
CVE-2024-34666 1 Samsung 1 Android 2026-06-17 N/A 7.5 HIGH
Out-of-bounds write in parsing h.264 format in a specific mode in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.
CVE-2024-34665 1 Samsung 1 Android 2026-06-17 N/A 7.5 HIGH
Out-of-bounds write in parsing h.264 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.
CVE-2024-34662 1 Samsung 1 Android 2026-06-17 N/A 6.2 MEDIUM
Improper access control in ActivityManager prior to SMR Oct-2024 Release 1 in select Android 12, 13 and SMR Sep-2024 Release 1 in select Android 14 allows local attackers to execute privileged behaviors.
CVE-2024-34661 1 Samsung 1 Assistant 2026-06-17 N/A 4.3 MEDIUM
Improper handling of insufficient permissions in Samsung Assistant prior to version 9.1.00.7 allows remote attackers to access location data. User interaction is required for triggering this vulnerability.
CVE-2024-34660 1 Samsung 1 Notes 2026-06-17 N/A 7.3 HIGH
Heap-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code.