Vulnerabilities (CVE)

Filtered by vendor Samsung Subscribe
Total 1631 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-20901 1 Samsung 1 Android 2026-06-17 N/A 5.9 MEDIUM
Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2024-20900 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Improper authentication in MTP application prior to SMR Jul-2024 Release 1 allows local attackers to enter MTP mode without proper authentication.
CVE-2024-20899 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Use of implicit intent for sensitive communication in RCS function in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.
CVE-2024-20898 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Use of implicit intent for sensitive communication in SoftphoneClient in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.
CVE-2024-20897 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Use of implicit intent for sensitive communication in FCM function in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.
CVE-2024-20896 1 Samsung 1 Android 2026-06-17 N/A 5.5 MEDIUM
Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.
CVE-2024-20895 1 Samsung 1 Android 2026-06-17 N/A 7.7 HIGH
Improper access control in Dar service prior to SMR Jul-2024 Release 1 allows local attackers to bypass restriction for calling SDP features.
CVE-2024-20894 1 Samsung 1 Android 2026-06-17 N/A 4.3 MEDIUM
Improper handling of exceptional conditions in Secure Folder prior to SMR Jul-2024 Release 1 allows physical attackers to bypass authentication under certain condition. User interaction is required for triggering this vulnerability.
CVE-2024-20893 1 Samsung 1 Android 2026-06-17 N/A 6.1 MEDIUM
Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows local attackers to trigger memory corruption.
CVE-2024-20892 1 Samsung 1 Android 2026-06-17 N/A 6.5 MEDIUM
Improper verification of signature in FilterProvider prior to SMR Jul-2024 Release 1 allows local attackers to execute privileged behaviors. User interaction is required for triggering this vulnerability.
CVE-2024-20891 1 Samsung 1 Android 2026-06-17 N/A 7.8 HIGH
Improper access control in launchFullscreenIntent of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities.
CVE-2024-20890 1 Samsung 1 Android 2026-06-17 N/A 5.3 MEDIUM
Improper input validation in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to trigger abnormal behavior.
CVE-2024-20889 1 Samsung 1 Android 2026-06-17 N/A 5.9 MEDIUM
Improper authentication in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to pair with devices.
CVE-2024-20888 1 Samsung 1 Android 2026-06-17 N/A 7.8 HIGH
Improper access control in OneUIHome prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability.
CVE-2024-20887 1 Samsung 1 Galaxy Buds Manager 2026-06-17 N/A 6.2 MEDIUM
Arbitrary directory creation in GalaxyBudsManager PC prior to version 2.1.240315.51 allows attacker to create arbitrary directory.
CVE-2024-20885 1 Samsung 1 Android 2026-06-17 N/A 5.1 MEDIUM
Improper component protection vulnerability in Samsung Dialer prior to SMR May-2024 Release 1 allows local attackers to make a call without proper permission.
CVE-2024-20884 1 Samsung 1 Android 2026-06-17 N/A 6.2 MEDIUM
Incorrect use of privileged API vulnerability in getSemBatteryUsageStats in BatteryStatsService prior to SMR Jun-2024 Release 1 allows local attackers to use privileged API.
CVE-2024-20883 1 Samsung 1 Android 2026-06-17 N/A 6.2 MEDIUM
Incorrect use of privileged API vulnerability in registerBatteryStatsCallback in BatteryStatsService prior to SMR Jun-2024 Release 1 allows local attackers to use privileged API.
CVE-2024-20882 1 Samsung 1 Android 2026-06-17 N/A 4.6 MEDIUM
Out-of-bounds read vulnerability in bootloader prior to SMR June-2024 Release 1 allows physical attackers to arbitrary data access.
CVE-2024-20881 1 Samsung 1 Android 2026-06-17 N/A 6.4 MEDIUM
Improper input validation vulnerability in chnactiv TA prior to SMR Jun-2024 Release 1 allows local privileged attackers lead to potential arbitrary code execution.