26755 matches found
CVE-2026-21114
An out-of-bounds write vulnerability exists in libsmkvextractor.so on devices prior to the SMR Oct-2026 Release 1 . This flaw allows local attackers to execute arbitrary code on the affected system. While the NCSC advisory notes broad vulnerabilities in Android, this specific CVE is identified as...
CVE-2026-108788
A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possible to launch the attack on the local host. The exploit has...
CVE-2026-108788
A vulnerability exists in deepseek-ai deepseek-harness up to version 0.1.1-rc.2 . The issue is located within the spawn function of the Sandbox component. By manipulating the Profile argument, an attacker can cause a sandbox issue. This attack can be launched on the local host . While the exploit...
EUVD-2026-97141
In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2026-66085 Information Disclosure in Modem
In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2026-108788: Undefined Security Weakness
A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possible to launch the attack on the local host. The exploit has...
PT-2026-110452
Name of the Vulnerable Software and Affected Versions libsimba.heifdec.media.samsung.so versions prior to SMR Oct-2026 Release 1 Description Improper input validation occurs when retrieving a cover image within the libsimba.heifdec.media.samsung.so library, which may allow a local attacker to...
CVE-2026-21133: Undefined Security Weakness
Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data...
CVE-2026-21130: Improper Input Validation
Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges...
CVE-2026-21131: Incorrect Default Permissions
Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device...
CVE-2026-21114: Out-of-bounds Write
Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...
CVE-2026-21128: Improper Input Validation
Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout privileges...
CVE-2026-21117: Undefined Security Weakness
Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information...
CVE-2026-21118: Undefined Security Weakness
Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage...
CVE-2026-21116: Undefined Security Weakness
Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory...
CVE-2026-21115: Undefined Security Weakness
Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory...
CVE-2026-21135: Undefined Security Weakness
Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information...
CVE-2026-21121: Undefined Security Weakness
Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs...
CVE-2026-21120: Use After Free
Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege...