AN
Product
Android
by Samsung · last CVE Sep 9, 2026
On CISA KEVExploited in the wild
502
CVEs
12
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 181Medium 243Low 65
Watch

Add Android to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-20888
7.8
0%
Feb 4
Out-of-bounds write in handling the block size for smp4vtd in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2025-20882
7.8
0%
Feb 4
Out-of-bounds write in accessing uninitialized memory for svc1td in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2025-20881
7.8
0%
Feb 4
Out-of-bounds write in accessing buffer storing the decoded video frames in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with…
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-49413
7.8
0%
Dec 3
Improper Verification of Cryptographic Signature in SmartSwitch prior to SMR Dec-2024 Release 1 allows local attackers to install malicious applications
Affected: 13.0; 13.0; 13.0; 13.0; 13.0; 13.0; +34 more
CVE-2024-49410
7.8
0%
Dec 3
Out-of-bounds write in libswmfextractor.so prior to SMR Dec-2024 Release 1 allows local attackers to execute arbitrary code
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-34678
7.8
0%
Nov 6
Out-of-bounds write in libsapeextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-34662
7.8
0%
Oct 8
Improper access control in ActivityManager prior to SMR Oct-2024 Release 1 in select Android 12, 13 and SMR Sep-2024 Release 1 in select Android 14 allows local attackers to…
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-34620
7.8
0%
Aug 7
Improper privilege management in SumeNNService prior to SMR Aug-2024 Release 1 allows local attackers to start privileged service
Affected: 13.0; 13.0; 13.0; 13.0; 13.0; 13.0; +34 more
CVE-2024-34615
7.8
0%
Aug 7
Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to cause memory corruption
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-34614
7.8
0%
Aug 7
Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-34612
7.8
0%
Aug 7
Out-of-bound write in libcodec2secmp4vdec.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-34595
7.8
0%
Jul 2
Improper access control in clickAdapterItem of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-34585
7.8
0%
Jul 2
Improper access control in launchApp of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-20901
7.8
0%
Jul 2
Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local attackers to write out-of-bounds memory
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-20893
7.8
0%
Jul 2
Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows local attackers to trigger memory corruption
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-20892
7.8
0%
Jul 2
Improper verification of signature in FilterProvider prior to SMR Jul-2024 Release 1 allows local attackers to execute privileged behaviors
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-20891
7.8
0%
Jul 2
Improper access control in launchFullscreenIntent of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-20888
7.8
0%
Jul 2
Improper access control in OneUIHome prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-20884
7.8
0%
Jun 4
Incorrect use of privileged API vulnerability in getSemBatteryUsageStats in BatteryStatsService prior to SMR Jun-2024 Release 1 allows local attackers to use privileged API
Affected: 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +26 more
CVE-2024-20883
7.8
0%
Jun 4
Incorrect use of privileged API vulnerability in registerBatteryStatsCallback in BatteryStatsService prior to SMR Jun-2024 Release 1 allows local attackers to use privileged API
Affected: 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +26 more
CVE-2024-20878
7.8
0%
Jun 4
Heap out-of-bound write vulnerability in parsing grid image in libsavscmn.so prior to SMR June-2024 Release 1 allows local attackers to execute arbitrary code
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-20877
7.8
0%
Jun 4
Heap out-of-bound write vulnerability in parsing grid image header in libsavscmn.so prior to SMR Jun-2024 Release 1 allows local attackers to execute arbitrary code
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-20876
7.8
0%
Jun 4
Improper input validation in libsheifdecadapter.so prior to SMR Jun-2024 Release 1 allows local attackers to lead to memory corruption
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-20874
7.8
0%
Jun 4
Improper access control vulnerability in SmartManagerCN prior to SMR Jun-2024 Release 1 allows local attackers to launch privileged activities
Affected: 13.0; 13.0; 13.0; 13.0; 13.0; 13.0; +34 more
CVE-2024-20849
7.8
0%
Apr 2
Out-of-bound Write vulnerability in chunk parsing implementation of libsdffextractor prior to SMR Apr-2023 Release 1 allows local attackers to execute arbitrary code
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-20848
7.8
0%
Apr 2
Improper Input Validation vulnerability in text parsing implementation of libsdffextractor prior to SMR Apr-2024 Release 1 allows local attackers to write out-of-bounds memory
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-20846
7.8
0%
Apr 2
Out-of-bounds write vulnerability while decoding hcr of libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +24 more
CVE-2024-20845
7.8
0%
Apr 2
Out-of-bounds write vulnerability while releasing memory in libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +24 more
CVE-2024-20844
7.8
0%
Apr 2
Out-of-bounds write vulnerability while parsing remaining codewords in libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +24 more
CVE-2024-20835
7.8
0%
Mar 5
Improper access control vulnerability in CustomFrequencyManagerService prior to SMR Mar-2024 Release 1 allows local attackers to execute privileged behaviors
Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more
CVE-2024-20819
7.8
0%
Feb 6
Out-of-bounds Write vulnerabilities in svc1td_vld_plh_ap of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow
Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more
CVE-2024-20818
7.8
0%
Feb 6
Out-of-bounds Write vulnerabilities in svc1td_vld_elh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow
Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more
CVE-2024-20817
7.8
0%
Feb 6
Out-of-bounds Write vulnerabilities in svc1td_vld_slh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow
Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more
CVE-2024-20813
7.8
0%
Feb 6
Out-of-bounds Write in padmd_vld_qtbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code
Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more
CVE-2024-20812
7.8
0%
Feb 6
Out-of-bounds Write in padmd_vld_htbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code
Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more
CVE-2023-42567
7.8
0%
Dec 5
Improper size check vulnerability in softsimd prior to SMR Dec-2023 Release 1 allows stack-based buffer overflow
Affected: 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +9 more
CVE-2023-42566
7.8
0%
Dec 5
Out-of-bound write vulnerability in libsavsvc prior to SMR Dec-2023 Release 1 allows local attackers to execute arbitrary code
Affected: 11.0 before 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +10 more
CVE-2023-42563
7.8
0%
Dec 5
Integer overflow vulnerability in landmarkCopyImageToNative of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow
Affected: 12.0 before 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +10 more
CVE-2023-42562
7.8
0%
Dec 5
Integer overflow vulnerability in detectionFindFaceSupportMultiInstance of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger…
Affected: 12.0 before 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +10 more
CVE-2023-42560
7.8
0%
Dec 5
Heap out-of-bounds write vulnerability in dec_mono_audb of libsavsac.so prior to SMR Dec-2023 Release 1 allows an attacker to execute arbitrary code
Affected: 11.0 before 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +10 more
CVE-2023-42558
7.8
0%
Dec 5
Out of bounds write vulnerability in HDCP in HAL prior to SMR Dec-2023 Release 1 allows attacker to perform code execution
Affected: 13.0; 13.0; 13.0; 13.0; 13.0; 13.0; +9 more
CVE-2023-42538
7.8
0%
Nov 7
An improper input validation in saped_rec_silence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write
Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more
CVE-2023-42537
7.8
0%
Nov 7
An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write
Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more
CVE-2023-42536
7.8
0%
Nov 7
An improper input validation in saped_dec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write
Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more
CVE-2023-42535
7.8
0%
Nov 7
Out-of-bounds Write in read_block of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +33 more
CVE-2023-42529
7.8
0%
Nov 7
Out-of-bound write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to execute arbitrary code
Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more
CVE-2023-42528
7.8
0%
Nov 7
Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code
Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more
CVE-2023-30739
7.8
0%
Nov 7
Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code
Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more
CVE-2023-30733
7.8
0%
Oct 4
Stack-based Buffer Overflow in vulnerability HDCP trustlet prior to SMR Oct-2023 Release 1 allows local privileged attackers to perform code execution
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +31 more
CVE-2023-30692
7.8
0%
Oct 4
Improper input validation vulnerability in Evaluator prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities
Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more
Page 2 of 4 · 181 total
The 500 most important CVEs for this product (exploited first, then by severity)