samsung-android-lpe

Part 1: Arbitrary AT command execution CVE-2026-20980 Application ProcessorAP commands are managed by atdistributor after switching the connection mode in an unlocked device using. AT+SWATD=0 AT+ACTIVATE=0,0,0 AT+SWATD=1 atdistributor verifies AT commands through the function pacmcheckatcmds void...

CVE-2026-21018

Dépassement de tampon SveService Samsung SMR Mai 2026 SVE-2026-0478CVE-2026-21018 Versions affectées : Android 14, 15, 16 Statut de divulgation : Divulgué privément Écriture hors limites dans SveService avant SMR Mai-2026 Release 1 permet à des attaquants privilégiés locaux d'exécuter du code...

LocationManager Android Unauthorized Access

The vulnerability of the LocationManager component in the Android operating system of Samsung mobile devices is related to the improper use of standard permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Exploit for Incorrect Permission Assignment for Critical Resource in Samsung Android

--- CVE-2026-21011 – Log4j‑style JNDI Injection in Custom Lo...

PT-2026-46928

Name of the Vulnerable Software and Affected Versions Samsung Android USB Driver for Windows versions prior to 1.9.5.0 Description Improper input validation allows a local attacker to access out-of-bounds memory. Out-of-bounds memory access occurs when a program reads or writes data outside the...

Android FacAtFunction Arbitrary Command Execution

The vulnerability of the FacAtFunction function in Android mobile devices from Samsung is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to execute arbitrary commands...

CVE-2026-21038: Undefined Security Weakness

Improper input validation in Samsung Android USB Driver for Windows prior to version 1.9.5.0 allows local attacker to access out-of-bounds memory...

📄 Samsung QuramDng Malformed DNG TrimBounds Opcode Out‑Of‑Bounds Read

A vulnerability exists in the image decoding logic of Quram DNG parser within libimagecodec.quram.so. The flawed bounds validation in handling TrimBounds opcode triggers out-of-bounds reads on heap-allocated image buffers. This issue allows remote attackers to craft a malicious DNG payload, embed...

EUVD-2017-16948

Malware in sbrugna...

EUVD-2022-33218

Malicious code in bioql PyPI...

CVE-2022-28779

Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code...

CVE-2019-15442

The Samsung on7xelteskt Android device with a build fingerprint of samsung/on7xelteskt/on7xelteskt:8.1.0/M1AJQ/G610SKSU2CSB1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000100, versionName=7.0.1.0 that allows other...

CVE-2017-7978

Samsung Android devices with L5.0/5.1, M6.0, and N7.x software allow attackers to obtain sensitive information by reading a world-readable log file after an unexpected reboot. The Samsung ID is SVE-2017-8290...

PT-2024-7445 · Samsung · Samsung Android

Name of the Vulnerable Software and Affected Versions: Samsung Android mobile devices affected versions not specified Samsung Android mobile devices versions prior to SMR May-2024 Release 1 Description: The issue is related to weaknesses in the authentication procedure of the bootloader component...

PT-2023-9618 · Samsung · Samsung Android

Name of the Vulnerable Software and Affected Versions: Samsung mobile devices versions prior to SMR Feb-2024 Release 1 Description: The issue is related to improper input validation in the bootloader, which allows local privileged attackers to cause an Out-Of-Bounds read. This can potentially...

sec_store Android Data Compromise

The vulnerability of the secstore component in the Android operating system on Samsung devices with Qualcomm chipsets SDM660, MSM8998, SDM845, SM8150 arises from the loss of precision for a large number of operations. Exploiting this vulnerability allows an attacker to compromise the...

Android exchange buffer File Read/Modify/Delete

The vulnerability of the exchange buffer in Android mobile devices from Samsung is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to read, modify, or delete files...

CVE-2022-28779

Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code...

Path traversal

Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code...

Samsung Android USB Driver code-related vulnerabilities

Samsung Android USB Driver is a Samsung USB driver from Samsung South Korea. A security vulnerability exists in Samsung Android USB Driver versions prior to 1.7.50, which originates from an uncontrolled search path element vulnerability in the windows installer program. An attacker could exploit...