CVE-2026-21107

CVE-2026-21107 is an out-of-bounds write vulnerability in Samsung Notes prior to version 4.4.45.5 , allowing a local attacker with low privileges to write to out-of-bounds memory. The CVSS 4.0 base score is 6.9 (MEDIUM) , with a local attack vector, low complexity, and no user interaction require...

CVE-2026-21107

Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory...

CVE-2026-21107

Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory...

EUVD-2026-74648

Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory...

CVE-2026-21106

Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings...

EUVD-2026-74647

Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings...

CVE-2026-21106

CVE-2026-21106 is an improper verification of intent by a broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 . A local attacker with no privileges required can exploit this flaw to disable enhanced data protection settings , resulting in a low availability impact. The vendor-ass...

CVE-2026-21106

Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings...

CVE-2026-21095

CVE-2026-21095 is a heap-based buffer overflow in the DNG decoder of the libimagecodec.quram.so library on Samsung mobile devices. The vulnerability allows remote attackers to achieve arbitrary code execution by supplying a crafted DNG image file, with the attack vector rated as network-based, lo...

CVE-2026-21090

CVE-2026-21090 is an out-of-bounds write vulnerability in libsaviextractor.so on Samsung mobile devices, affecting firmware prior to SMR Sep-2026 Release 1 . A local attacker with low privileges can write to out-of-bounds memory. NVD assigns a CVSS 3.1 score of 7.8 (HIGH) , while Samsung's CNA ra...

CVE-2026-21087

Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege...

CVE-2026-21112: Improper Input Validation

Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability...

CVE-2026-21107: Out-of-bounds Write

Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory...

PT-2026-88840

Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings...

PT-2026-88841

Name of the Vulnerable Software and Affected Versions Samsung Notes versions prior to 4.4.45.5 Description An out-of-bounds write exists that allows local attackers to write to memory outside the allocated buffer. An out-of-bounds write is a memory corruption error that occurs when a program writ...

PT-2026-88846

Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability...

CVE-2026-21106: Improper Verification of Intent by Broadcast Receiver

Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings...

PT-2026-88178

Samsung has detailed on its official website the September 2026 security patch with 90 vulnerability fixes for smartphones, tablets, and smartwatches in the Galaxy line. • The update package resolves flaws in the Android operating system, the One UI interface, and proprietary hardware components ...

Exploit for Use After Free in Linux Linux_Kernel

Galaxy A37 Root — CVE-2026-43499 Native payload for the Sam...

CVE-2026-86315

A flaw was found in Samsung Open Source Escargot. This out-of-bounds write vulnerability, caused by numeric truncation, allows an attacker to corrupt native memory. By supplying specially crafted JavaScript for execution, a remote attacker can trigger this flaw, leading to the host process crashi...