CVEs published by Samsung Mobile

CVEs published by Samsung Mobile (CVE Numbering Authority). 27 tracked.

• CVE-2026-21061 MEDIUM 6.5 MITIGATE Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access
• CVE-2026-21068 HIGH 7.8 MITIGATE Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers
• CVE-2026-21075 MEDIUM 5.3 Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3 allows remote attack
• CVE-2026-21065 HIGH 7.8 MITIGATE Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write
• CVE-2026-21066 HIGH 7.8 MITIGATE Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers t
• CVE-2026-21067 HIGH 7.8 MITIGATE Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of
• CVE-2026-21069 HIGH 7.8 MITIGATE Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows
• CVE-2026-21071 HIGH 7.8 MITIGATE Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attacker
• CVE-2026-21072 HIGH 7.8 MITIGATE Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers
• CVE-2026-21083 MEDIUM 6.5 UPGRADE Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensit
• CVE-2026-21058 HIGH 7.1 MITIGATE Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete
• CVE-2026-21074 HIGH 7.2 Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary c
• CVE-2026-21059 HIGH 7.1 MITIGATE Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows l
• CVE-2026-21084 MEDIUM 6.9 Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive i
• CVE-2026-21063 MEDIUM 6.1 MITIGATE Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical a
• CVE-2026-21073 MEDIUM 6.1 MITIGATE Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch
• CVE-2026-21078 MEDIUM 6.5 UPGRADE Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6
• CVE-2026-21080 MEDIUM 6.5 UPGRADE Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers
• CVE-2026-21079 MEDIUM 6.5 UPGRADE Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to in
• CVE-2026-21082 MEDIUM 5.5 UPGRADE Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive in
• CVE-2026-21064 MEDIUM 5.5 MITIGATE Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inope
• CVE-2026-21076 MEDIUM 5.5 UPGRADE Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive in
• CVE-2026-21077 MEDIUM 5.5 UPGRADE Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive in
• CVE-2026-21060 MEDIUM 4.6 MITIGATE Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to acc
• CVE-2026-21070 MEDIUM 4.6 MITIGATE Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to acce
• CVE-2026-21081 MEDIUM 5.1 Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows loca
• CVE-2026-21062 LOW 3.3 MITIGATE Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access c

← Back to latest CVEs