CVE-2025-20937

Out-of-bounds write in Keymaster trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...

CVE-2025-27533

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ. During unmarshalling of OpenWire commands the size value of buffers was not properly validated which could lead to excessive memory allocation and be exploited to cause a denial of service DoS by depleting process memor...

CVE-2025-39361

CVE-2025-39361 : Royal Elementor Addons (WordPress plugin)

CVE-2025-20980

Out-of-bounds write in libsavscmn prior to Android 15 allows local attackers to cause memory corruption...

CVE-2025-20976

CVE-2025-20976 concerns Samsung Notes. Multiple sources confirm an out-of-bounds read in the binary-integration step when applying binary of text content, affecting Samsung Notes prior to version 4.4.29.23. The issue allows reading beyond allocated memory, with impact on confidentiality. A fix is...

CVE-2025-20975

CVE-2025-20975 describes an improper export of Android application components in Samsung’s AODService, affecting versions prior to 8.8.28.12. The root issue is that components are exportable in a way that can allow a local attacker to launch an arbitrary activity with systemui privileges. Affecte...

CVE-2025-20974

Summary: CVE-2025-20974 concerns Samsung’s PackageInstallerCN. Multiple connected sources confirm the issue is due to improper handling of insufficient permissions in PackageInstallerCN before version 15.0.11.0, enabling a local attacker to bypass user interaction for requested installations. Aff...

CVE-2025-20972

Improper verification of intent by broadcast receiver in Samsung Flow prior to version 4.9.17.6 allows local attackers to modify Samsung Flow configuration...

CVE-2025-20971

Samsung Flow games console: A CVE-2025-20971 vulnerability affects Samsung Flow prior to version 4.9.17.6, caused by improper input validation. This allows a local attacker to access data within Samsung Flow. Impact is data exposure within the app; no exploit details are provided. Remediation: up...

CVE-2025-20967

The CVE-2025-20967 case concerns Samsung Gallery. Affected versions expose improper access control in Global Android 13 (pre-14.5.10.3), China Android 13 (pre-14.5.09.3), and Android 14 (pre-15.5.04.5), allowing an attacker to read and write arbitrary files with Samsung Gallery privileges. The un...

CVE-2025-20967

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows attackers to read and write arbitrary file with the privilege of Samsung Gallery...

CVE-2025-20965

Improper handling of insufficient permission in Bixby wakeup prior to version 2.3.74.8 allows local attackers to access sensitive data...

CVE-2025-20964

Out-of-bounds write in parsing media files in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2025-20963

CVE-2025-20963 involves an out-of-bounds write during memory initialization in the library libsavsvc.so, exposing local attackers to write past the allocated memory. This vulnerability is tied to Samsung SMR May-2025 Release 1; Samsung security update disclosures reference this patch cycle as the...

CVE-2025-20962

Improper handling of insufficient permission in SpenGesture service prior to SMR May-2025 Release 1 allows local attackers to track the S Pen position...

CVE-2025-20957

Summary: CVE-2025-20957 refers to an improper access control in SmartManagerCN. Local attackers could launch arbitrary activities with SmartManagerCN privileges due to insufficient authorization controls before SMR May-2025 Release 1. Affected software/component: SmartManagerCN (Smart Manager) pr...

CVE-2025-20937

CVE-2025-20937 describes an out-of-bounds write in the Keymaster trustlet prior to Samsung SMR May-2025 Release 1. The vulnerability enables local privileged attackers to write out-of-bounds memory, potentially causing memory corruption with high impact (confidentiality/ integrity/ availability)....

CVE-2025-0667

creationtimestamp| type| source ---|---|--- 2025-05-07 08:13:53+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lokwrhkhif52 2025-05-07 08:21:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15284 2025-05-07...

CVE-2025-0666

creationtimestamp| type| source ---|---|--- 2025-05-07 08:03:03+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lokwi7w5atl2 2025-05-07 08:21:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15285 2025-05-07...

CVE-2025-0668

creationtimestamp| type| source ---|---|--- 2025-05-07 08:03:03+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lokwi4elndl2 2025-05-07 08:21:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15283 2025-05-07 10:31:36+00:00| seen|...