Samsung vulnerabilities and fixes

CVEs that mention Samsung, ranked by priority. 30 tracked.

Samsung has 30 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2026-08-12. Highest priority: CVE-2025-57835 (score 36/100).

• CVE-2025-57835 HIGH 7.5 MITIGATE MITIGATE An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850
• CVE-2025-59440 HIGH 7.5 MITIGATE MITIGATE An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 85
• CVE-2026-21061 MEDIUM 6.5 MITIGATE Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access
• CVE-2026-18772 MEDIUM 6.5 MITIGATE Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponen
• CVE-2026-19517 MEDIUM 6.5 MITIGATE Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vu
• CVE-2026-19518 MEDIUM 6.5 MITIGATE Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input D
• CVE-2026-19587 MEDIUM 6.5 MITIGATE Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation.
• CVE-2026-19588 MEDIUM 6.5 MITIGATE Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.
• CVE-2026-21068 HIGH 7.8 MITIGATE Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers
• CVE-2026-21065 HIGH 7.8 MITIGATE Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write
• CVE-2026-21066 HIGH 7.8 MITIGATE Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers t
• CVE-2026-21067 HIGH 7.8 MITIGATE Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of
• CVE-2026-21069 HIGH 7.8 MITIGATE Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows
• CVE-2026-21071 HIGH 7.8 MITIGATE Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attacker
• CVE-2026-21072 HIGH 7.8 MITIGATE Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers
• CVE-2026-21083 MEDIUM 6.5 UPGRADE Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensit
• CVE-2026-21058 HIGH 7.1 MITIGATE Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete
• CVE-2026-21059 HIGH 7.1 MITIGATE Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows l
• CVE-2026-21063 MEDIUM 6.1 MITIGATE Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical a
• CVE-2026-21073 MEDIUM 6.1 MITIGATE Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch
• CVE-2026-21078 MEDIUM 6.5 UPGRADE Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6
• CVE-2026-21080 MEDIUM 6.5 UPGRADE Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers
• CVE-2026-21079 MEDIUM 6.5 UPGRADE Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to in
• CVE-2026-21082 MEDIUM 5.5 UPGRADE Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive in
• CVE-2026-21064 MEDIUM 5.5 MITIGATE Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inope
• CVE-2026-21076 MEDIUM 5.5 UPGRADE Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive in
• CVE-2026-21077 MEDIUM 5.5 UPGRADE Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive in
• CVE-2026-21060 MEDIUM 4.6 MITIGATE Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to acc
• CVE-2026-21070 MEDIUM 4.6 MITIGATE Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to acce
• CVE-2026-21062 LOW 3.3 MITIGATE Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access c

FAQ

How do I fix Samsung vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Samsung being exploited right now?

None of the tracked Samsung CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which Samsung CVE should I patch first?

CVE-2025-57835 currently ranks highest (36/100): An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850.

← Back to latest CVEs