100679 matches found
CVE-2026-21095
CVE-2026-21095 is a heap-based buffer overflow in the DNG decoder of the libimagecodec.quram.so library on Samsung mobile devices. The vulnerability allows remote attackers to achieve arbitrary code execution by supplying a crafted DNG image file, with the attack vector rated as network-based, lo...
CVE-2026-21094
CVE-2026-21094 is an improper input validation flaw in wpa_supplicant on Samsung mobile devices, allowing an adjacent attacker to perform an out-of-bounds memory write . NVD scores it 8.8 (HIGH) under CVSS 3.1, while Samsung's own CNA rating is 6.1 (MEDIUM) under CVSS 4.0, reflecting higher attac...
CVE-2026-45515
creationtimestamp| type| source ---|---|--- 2026-09-09 04:47:41+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...
CVE-2026-21093
A stack-based buffer overflow in the PROCA trustlet on Samsung mobile devices allows a local privileged attacker to write out-of-bounds memory, resulting in a high impact to vulnerable-system confidentiality (CVSS 4.0 base score 5.6, MEDIUM ). The attack requires local access, high privileges, an...
CVE-2026-21092
CVE-2026-21092 is a path traversal vulnerability in the ImsService component of Samsung mobile devices, affecting versions prior to SMR Sep-2026 Release 1 . The flaw allows remote attackers to create image files with system server privilege , potentially compromising system integrity. The assigne...
CVE-2026-21091
CVE-2026-21091 is an out-of-bounds write vulnerability in libcodec2secevrcdec.so on Samsung mobile devices, prior to SMR Sep-2026 Release 1 . A local attacker with low privileges can write out-of-bounds memory. NVD rates this CVSS 3.1: 7.8 (HIGH) , while Samsung's CNA scores it CVSS 4.0: 4.8 (MED...
CVE-2026-21090
CVE-2026-21090 is an out-of-bounds write vulnerability in libsaviextractor.so on Samsung mobile devices, affecting firmware prior to SMR Sep-2026 Release 1 . A local attacker with low privileges can write to out-of-bounds memory. NVD assigns a CVSS 3.1 score of 7.8 (HIGH) , while Samsung's CNA ra...
CVE-2026-21089
CVE-2026-21089 is an out-of-bounds memory write vulnerability in libsubextractor.so on Samsung mobile devices, caused by improper input validation when removing a style tag. A local attacker with low privileges can exploit it, potentially leading to high impact on confidentiality, integrity, and ...
CVE-2026-21088
CVE-2026-21088 is an improper input validation vulnerability in libsubextractor.so on Samsung mobile devices, triggered when loading a subtitle frame. The flaw allows a local attacker to perform an out-of-bounds memory write , potentially leading to high impact on confidentiality, integrity, and ...
CVE-2026-21087
CVE-2026-21087 is an out-of-bounds write vulnerability in libmdnie.so , a library within Samsung Mobile's firmware. It affects devices prior to the SMR Sep-2026 Release 1 security update. A local attacker with no required privileges or user interaction can trigger the flaw to execute arbitrary co...
CVE-2026-21085
CVE-2026-21085 is an out-of-bounds write in the Keymaster trustlet on Samsung mobile devices, prior to the SMR Sep-2026 Release 1 . A local privileged attacker can write out-of-bounds memory, potentially leading to significant compromise of confidentiality, integrity, and availability of the vuln...
CVE-2026-28671
creationtimestamp| type| source ---|---|--- 2026-09-09 04:47:32+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...
CVE-2026-28668
creationtimestamp| type| source ---|---|--- 2026-09-09 04:47:30+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...
CVE-2026-28666
creationtimestamp| type| source ---|---|--- 2026-09-09 04:47:28+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...
CVE-2026-28664
creationtimestamp| type| source ---|---|--- 2026-09-09 04:47:26+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...
CVE-2026-28663
creationtimestamp| type| source ---|---|--- 2026-09-09 04:47:23+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...
CVE-2026-28662
creationtimestamp| type| source ---|---|--- 2026-09-09 04:47:15+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...
CVE-2026-28660
creationtimestamp| type| source ---|---|--- 2026-09-09 04:47:13+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...