19 matches found
CVE-2026-21104
CVE-2026-21104 is a heap-based buffer overflow in the KnoxVault trustlet on Samsung mobile devices, affecting firmware prior to SMR Sep-2026 Release 1 . The flaw allows a local privileged attacker to achieve arbitrary code execution . The CVSS 4.0 base score is 7.1 (HIGH) , with a local attack ve...
EUVD-2026-74645
Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code...
CVE-2026-21103
CVE-2026-21103 is a path traversal vulnerability in Samsung's GalaxyDiagnostics component, affecting versions prior to SMR Sep-2026 Release 1 . A physical attacker with no required privileges or user interaction can exploit this flaw to access files with system privilege , resulting in high confi...
CVE-2026-21101
CVE-2026-21101 addresses an improper input validation flaw in the DualDAR driver on Samsung Mobile devices. The defect allows local privileged attackers to potentially execute arbitrary code with root privilege , resulting in high impact to confidentiality, integrity, and availability of the vuln...
EUVD-2026-74641
Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity...
CVE-2026-21100
CVE-2026-21100 is an improper access control vulnerability in Samsung's SystemUI component on mobile devices prior to the SMR Sep-2026 Release 1 security update. A local attacker with no privileges and no user interaction can launch arbitrary activity , resulting in a HIGH impact on availability ...
CVE-2026-21099
CVE-2026-21099 is an improper access control vulnerability in SettingsProvider on Samsung mobile devices. A local attacker with no privileges required and no user interaction can access sensitive information on the vulnerable system. The CVSS 4.0 base score is 5.1 (MEDIUM) , reflecting the local ...
EUVD-2026-74639
Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction...
CVE-2026-21098
CVE-2026-21098 is an improper access control vulnerability in Samsung's Link to Windows feature, affecting versions prior to SMR Sep-2026 Release 1 . A local attacker can establish a connection with the PC without proper user interaction , resulting in high impact on availability as scored by the...
EUVD-2026-74638
Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity...
CVE-2026-21096
CVE-2026-21096 is a heap-based buffer overflow in the JPEG decoder of libimagecodec.quram.so in Samsung Mobile devices, prior to the SMR Sep-2026 Release 1 . The vulnerability allows remote attackers to execute arbitrary code, with no user interaction or privileges required, though the attack req...
EUVD-2026-74637
Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code...
CVE-2026-21094
CVE-2026-21094 is an improper input validation flaw in wpa_supplicant on Samsung Mobile devices prior to the SMR Sep-2026 Release 1 security update. The flaw allows an adjacent attacker to perform an out-of-bounds memory write . Per the vendor-assigned CVSS 4.0 score of 6.1 (MEDIUM) , the attack ...
EUVD-2026-74635
Improper input validation in wpasupplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory...
CVE-2026-21093
A stack-based buffer overflow in the PROCA trustlet on Samsung mobile devices allows a local privileged attacker to write out-of-bounds memory, resulting in a high impact to vulnerable-system confidentiality (CVSS 4.0 base score 5.6, MEDIUM ). The attack requires local access, high privileges, an...
CVE-2026-21092
CVE-2026-21092 is a path traversal vulnerability in the ImsService component of Samsung mobile devices, affecting versions prior to SMR Sep-2026 Release 1 . The flaw allows remote attackers to create image files with system server privilege , potentially compromising system integrity. The assigne...
EUVD-2026-74631
Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory...
CVE-2026-21085
CVE-2026-21085 is an out-of-bounds write in the Keymaster trustlet on Samsung mobile devices, prior to the SMR Sep-2026 Release 1 . A local privileged attacker can write out-of-bounds memory, potentially leading to significant compromise of confidentiality, integrity, and availability of the vuln...