Vulnerabilities in Samsung Mobile

1,419 results
CVE-2023-42543MEDIUMImproper verification of intent by broadcast receiver vulnerability in Bixby Voice prior to version 3.3.35.12 allows attackers to access arbEPSS 0.5%CVE-2023-42530MEDIUMImproper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct withoEPSS 0.5%CVE-2022-24002MEDIUMImproper Authorization vulnerability in Link Sharing prior to version 12.4.00.3 allows attackers to open protected activity via PreconditionEPSS 0.5%CVE-2022-26097MEDIUMNull pointer dereference vulnerability in parser_unknown_property function in libsimba library prior to SMR Apr-2022 Release 1 allows out ofEPSS 0.5%CVE-2022-26093MEDIUMNull pointer dereference vulnerability in parser_irot function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds writEPSS 0.5%CVE-2022-26095MEDIUMNull pointer dereference vulnerability in parser_colr function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds writEPSS 0.5%CVE-2022-26096MEDIUMNull pointer dereference vulnerability in parser_ispe function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds writEPSS 0.5%CVE-2022-26094MEDIUMNull pointer dereference vulnerability in parser_auxC function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds writEPSS 0.5%CVE-2022-27567MEDIUMNull pointer dereference vulnerability in parser_hvcC function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds writEPSS 0.5%CVE-2022-26099MEDIUMNull pointer dereference vulnerability in parser_infe function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds readEPSS 0.5%CVE-2024-34587HIGHImproper input validation in parsing application information from RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attEPSS 0.5%CVE-2023-21514HIGHImproper scheme validation from InstantPlay Deeplink in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API toEPSS 0.5%CVE-2026-21045HIGHOut-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write EPSS 0.5%CVE-2026-21048HIGHOut-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write oEPSS 0.5%CVE-2023-21515HIGHInstantPlay which included vulnerable script which could execute javascript in Galaxy Store prior to version 4.5.49.8 allows attackers to exEPSS 0.5%CVE-2023-30706HIGHImproper authorization in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows attacker to read arbitrary file with system privilege.EPSS 0.5%CVE-2023-42532MEDIUMImproper Certificate Validation in FotaAgent prior to SMR Nov-2023 Release1 allows remote attacker to intercept the network traffic includinEPSS 0.5%CVE-2024-49420HIGHImproper handling of responses in GamingHub prior to version 6.1.04.6 in Korea, 7.1.03.7 in Global allows remote attackers to launch arbitraEPSS 0.5%CVE-2023-42545MEDIUMUse of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in AnEPSS 0.5%CVE-2021-25477MEDIUMAn improper error handling in Mediatek RRC Protocol stack prior to SMR Oct-2021 Release 1 allows modem crash and remote denial of service.EPSS 0.5%