SM
Product
Samsung Mobile Devices
On CISA KEVExploited in the wild
249
CVEs
13
On KEV
9.8
Max CVSS
14
New 30D
Severity mix
Critical 8High 68Medium 133Low 40
Watch
Add Samsung Mobile Devices to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-21043 In wildKEV | 9.8 | Sep 12 | Samsung Mobile Devices Out-of-Bounds Write Vulnerability Affected: All versions, or not specified |
| CVE-2025-21042 In wildKEV | 9.8 | Sep 12 | Samsung Mobile Devices Out-of-Bounds Write Vulnerability Affected: All versions, or not specified |
| CVE-2026-21096 | 9.8 | Sep 9 | Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code Affected: All versions, or not specified |
| CVE-2026-21095 | 9.8 | Sep 9 | Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code Affected: All versions, or not specified |
| CVE-2023-21467 | 9.8 | Sep 3 | Error in 3GPP specification implementation in Exynos baseband prior to SMR Apr-2023 Release 1 allows incorrect handling of unencrypted message Affected: All versions, or not specified |
| CVE-2022-39862 | 9.8 | Oct 7 | Improper authorization in Dynamic Lockscreen prior to SMR Sep-2022 Release 1 in Android R(11) and 3.3.03.66 in Android S(12) allows unauthorized use of javascript interface api Affected: R(11), S(12) before SMR Oct-2022 Release 1 |
| CVE-2022-33719 | 9.8 | Aug 5 | Improper input validation in baseband prior to SMR Aug-2022 Release 1 allows attackers to cause integer overflow to heap overflow Affected: 10, 11, 12 before SMR Aug-2022 Release 1 |
| CVE-2026-20973 | 9.1 | Jan 9 | Out-of-bounds read in libimagecodec.quram.so prior to SMR Jan-2026 Release 1 allows remote attacker to access out-of-bounds memory Affected: All versions, or not specified |
Showing 8