SM
Product
Samsung Mobile Devices
On CISA KEVExploited in the wild
152
CVEs
13
On KEV
9.8
Max CVSS
14
New 30D
Severity mix
Critical 6High 43Medium 78Low 25
Watch
Add Samsung Mobile Devices to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-21043 In wildKEV | 9.8 | Sep 12 | Samsung Mobile Devices Out-of-Bounds Write Vulnerability Affected: All versions, or not specified |
| CVE-2025-21042 In wildKEV | 9.8 | Sep 12 | Samsung Mobile Devices Out-of-Bounds Write Vulnerability Affected: All versions, or not specified |
| CVE-2022-22265 In wildKEV | 7.8 | Jan 7 | Samsung Mobile Devices Use-After-Free Vulnerability Affected: O(8.x), P(9.0), Q(10.0), R(11.0), S(12.0) before SMR Jan-2022 Release 1 |
| CVE-2021-25487 In wildKEV | 7.8 | Oct 6 | Samsung Mobile Devices Out-of-Bounds Read Vulnerability Affected: O(8.1), P(9.0), Q(10.0), R(11.0) before SMR Oct-2021 Release 1 |
| CVE-2021-25337 In wildKEV | 7.1 | Mar 4 | Samsung Mobile Devices Improper Access Control Vulnerability Affected: Selected P(9.0), Q(10.0), R(11.0) before SMR Mar-2021 Release 1 |
| CVE-2021-25372 In wildKEV | 6.7 | Mar 26 | Samsung Mobile Devices Improper Boundary Check Vulnerability Affected: Q(10.0), R(11.0) devices with exynos980, exynos2100, exynos9830 before SMR Mar-2021 Release 1 |
| CVE-2021-25371 In wildKEV | 6.7 | Mar 26 | Samsung Mobile Devices Unspecified Vulnerability Affected: Q(10.0), R(11.0) devices with exynos980, exynos2100, exynos9830 before SMR Mar-2021 Release 1 |
| CVE-2021-25395 In wildKEV | 6.4 | Jun 11 | Samsung Mobile Devices Race Condition Vulnerability Affected: O(8.x), P(9.0), Q(10.0), R(11.0) before SMR MAY-2021 Release 1 |
| CVE-2021-25394 In wildKEV | 6.4 | Jun 11 | Samsung Mobile Devices Race Condition Vulnerability Affected: O(8.x), P(9.0), Q(10.0), R(11.0) before SMR MAY-2021 Release 1 |
| CVE-2021-25489 In wildKEV | 5.5 | Oct 6 | Samsung Mobile Devices Improper Input Validation Vulnerability Affected: O(8.1), P(9.0), Q(10.0), R(11.0) before SMR Oct-2021 Release 1 |
| CVE-2021-25369 In wildKEV | 5.5 | Mar 26 | Samsung Mobile Devices Improper Access Control Vulnerability Affected: O(8.x), P(9.0), Q(10.0) before SMR Mar-2021 Release 1 |
| CVE-2023-21492 In wildKEV | 4.4 | May 4 | Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability Affected: Selected Android 11, 12, 13 devices before SMR May-2023 Release 1 |
| CVE-2021-25370 In wildKEV | 4.4 | Mar 26 | Samsung Mobile Devices Memory Corruption Vulnerability Affected: Selected O(8.X), P(9.0), Q(10.0), R(11.0) before SMR Mar-2021 Release 1 |
| CVE-2026-21096 | 9.8 | Sep 9 | Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code Affected: All versions, or not specified |
| CVE-2026-21095 | 9.8 | Sep 9 | Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code Affected: All versions, or not specified |
| CVE-2022-39862 | 9.8 | Oct 7 | Improper authorization in Dynamic Lockscreen prior to SMR Sep-2022 Release 1 in Android R(11) and 3.3.03.66 in Android S(12) allows unauthorized use of javascript interface api Affected: R(11), S(12) before SMR Oct-2022 Release 1 |
| CVE-2022-33719 | 9.8 | Aug 5 | Improper input validation in baseband prior to SMR Aug-2022 Release 1 allows attackers to cause integer overflow to heap overflow Affected: 10, 11, 12 before SMR Aug-2022 Release 1 |
| CVE-2026-21120 | 8.9 | Oct 12 | Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege Affected: All versions, or not specified |
| CVE-2026-21094 | 8.8 | Sep 9 | Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2026-21042 | 8.7 | Jul 10 | Out-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows remote attackers to execute arbitrary code Affected: All versions, or not specified |
| CVE-2026-21125 | 8.6 | Oct 12 | Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code Affected: All versions, or not specified |
| CVE-2026-21124 | 8.6 | Oct 12 | Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code Affected: All versions, or not specified |
| CVE-2026-21019 | 8.6 | May 13 | Improper input validation in FacAtFunction in Galaxy Watch prior to SMR May-2026 Release 1 allows local attacker to execute arbitrary code with system privilege Affected: All versions, or not specified |
| CVE-2026-21049 | 8.4 | Jul 10 | Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary code Affected: All versions, or not specified |
| CVE-2026-21046 | 8.4 | Jul 10 | Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR Jul-2026 Release 1 allows local privileged attackers to execute arbitrary code Affected: All versions, or not specified |
| CVE-2026-21047 | 8.3 | Jul 28 | Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to potentially execute arbitrary code Affected: All versions, or not specified |
| CVE-2026-21048 | 8.3 | Jul 10 | Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2026-21045 | 8.3 | Jul 10 | Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2026-21091 | 7.8 | Sep 9 | Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2026-21090 | 7.8 | Sep 9 | Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2026-21089 | 7.8 | Sep 9 | Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2026-21088 | 7.8 | Sep 9 | Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2026-21087 | 7.8 | Sep 9 | Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege Affected: All versions, or not specified |
| CVE-2026-21086 | 7.8 | Sep 9 | Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to access proxy configuration Affected: All versions, or not specified |
| CVE-2026-21072 | 7.8 | Aug 10 | Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2026-21071 | 7.8 | Aug 10 | Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2026-21069 | 7.8 | Aug 10 | Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2026-21068 | 7.8 | Aug 10 | Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code Affected: All versions, or not specified |
| CVE-2026-21067 | 7.8 | Aug 10 | Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2026-21066 | 7.8 | Aug 10 | Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2026-21065 | 7.8 | Aug 10 | Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2026-21031 | 7.8 | Jun 5 | Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity Affected: All versions, or not specified |
| CVE-2026-21030 | 7.8 | Jun 5 | Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger privileged functions Affected: All versions, or not specified |
| CVE-2026-21029 | 7.8 | Jun 5 | Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 allows local attacker to execute privileged operations Affected: All versions, or not specified |
| CVE-2026-21020 | 7.8 | May 13 | Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers to trigger privileged functions Affected: All versions, or not specified |
| CVE-2026-21010 | 7.8 | Apr 13 | Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions Affected: All versions, or not specified |
| CVE-2022-39854 | 7.8 | Oct 7 | Improper protection in IOMMU prior to SMR Oct-2022 Release 1 allows unauthorized access to secure memory Affected: Q(10), R(11), S(12) before SMR Oct-2022 Release 1 |
| CVE-2022-39853 | 7.8 | Oct 7 | A use after free vulnerability in perf-mgr driver prior to SMR Oct-2022 Release 1 allows attacker to cause memory access fault Affected: Q(10), R(11), S(12) devices with Qualcomm SM8150 and SM8250 chipsets before SMR Oct-2022 Release 1 |
| CVE-2022-39852 | 7.8 | Oct 7 | A heap-based overflow vulnerability in makeContactAGIF in libagifencoder.quram.so library prior to SMR Oct-2022 Release 1 allows attacker to perform code execution Affected: Q(10), R(11), S(12) before SMR Oct-2022 Release 1 |
| CVE-2026-21100 | 7.1 | Sep 9 | Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity Affected: All versions, or not specified |
