Vulnerabilities (CVE)

Filtered by vendor Samsung Subscribe
Filtered by product Android
Total 475 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-21010 1 Samsung 1 Android 2026-06-17 N/A 6.0 MEDIUM
Improper privilege management in SamsungAccount prior to SMR Aug-2025 Release 1 allows local privileged attackers to deactivate Samsung account.
CVE-2025-21009 1 Samsung 1 Android 2026-06-17 N/A 5.5 MEDIUM
Out-of-bounds read in decoding malformed frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.
CVE-2025-21008 1 Samsung 1 Android 2026-06-17 N/A 5.5 MEDIUM
Out-of-bounds read in decoding frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.
CVE-2025-21007 1 Samsung 1 Android 2026-06-17 N/A 5.5 MEDIUM
Out-of-bounds write in accessing uninitialized memory in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.
CVE-2025-21006 1 Samsung 1 Android 2026-06-17 N/A 7.0 HIGH
Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 allows local attackers to write out-of-bounds memory.
CVE-2025-21005 1 Samsung 1 Android 2026-06-17 N/A 5.5 MEDIUM
Improper access control in isemtelephony prior to Android 15 allows local attackers to access sensitive information.
CVE-2025-21003 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Insecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows local attackers to access sensitive information.
CVE-2025-21002 1 Samsung 1 Android 2026-06-17 N/A 6.2 MEDIUM
Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to manipulate broadcasting Auracast.
CVE-2025-21001 1 Samsung 1 Android 2026-06-17 N/A 6.2 MEDIUM
Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to stop broadcasting Auracast.
CVE-2025-21000 1 Samsung 1 Android 2026-06-17 N/A 6.2 MEDIUM
Improper privilege management in Bluetooth prior to SMR Jul-2025 Release 1 allows local attackers to enable Bluetooth.
CVE-2025-20999 1 Samsung 1 Android 2026-06-17 N/A 4.1 MEDIUM
Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025 Release 1 allows secondary users to access owner's saved Wi-Fi password.
CVE-2025-20993 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Out-of-bounds write in libsecimaging.camera.samsung.so prior to SMR Jun-2025 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2025-20992 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Out-of-bound read in libsecimaging.camera.samsung.so prior to SMR Feb-2025 Release 1 allows local attackers to read out-of-bounds memory.
CVE-2025-20991 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Improper export of Android application components in Bluetooth prior to SMR Jun-2025 Release 1 allows local attackers to make devices discoverable.
CVE-2025-20990 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to access device identifier.
CVE-2025-20989 1 Samsung 1 Android 2026-06-17 N/A 5.2 MEDIUM
Improper logging in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a hmac_key.
CVE-2025-20988 1 Samsung 1 Android 2026-06-17 N/A 5.5 MEDIUM
Out-of-bounds read in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to read out-of-bounds memory.
CVE-2025-20987 1 Samsung 1 Android 2026-06-17 N/A 5.2 MEDIUM
Improper access control in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a auth_token.
CVE-2025-20985 1 Samsung 1 Android 2026-06-17 N/A 5.5 MEDIUM
Improper privilege management in ThemeManager prior to SMR Jun-2025 Release 1 allows local privileged attackers to reuse trial items.
CVE-2025-20983 1 Samsung 1 Android 2026-06-17 N/A 6.4 MEDIUM
Out-of-bounds write in checking auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.