CVE-2025-21067

Out-of-bounds read in the allocation of image buffer in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory...

EUVD-2025-33667

Out-of-bounds read in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory...

CVE-2025-21066

Samsung Notes contains an out-of-bounds read in the SPI decoder prior to version 4.4.30.63. The issue could let a local attacker access memory outside normal bounds. Affected software: Samsung Notes; impacted versions are before 4.4.30.63. Remediation: update to 4.4.30.63 or later (per PT-2025-41...

EUVD-2025-33671

Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability...

CVE-2025-21061

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive data. User interaction is required for triggering this vulnerability...

EUVD-2025-33673

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability...

CVE-2025-21060

CVE-2025-21060 affects Samsung Smart Switch prior to version 3.7.67.2, where cleartext storage of sensitive information in backups allows local attackers to access application backup data after user interaction triggers the vulnerability. The underlying issue is the storage of backup data in clea...

CVE-2025-21059

Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health...

EUVD-2025-33674

Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health...

CVE-2025-21059

Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health...

CVE-2025-21059

Samsung Health before version 6.30.5.105 suffers an improper authorization vulnerability that allows local attackers to access data within the app. The CVE-2025-21059 entries from NVD, Red Hat, CVE List, and other sources corroborate that the issue is scoped to Samsung Health and enables local ac...

CVE-2025-21057

CVE-2025-21057 affects Samsung Notes with vulnerable versions prior to 4.4.30.63. The root cause is use of implicit intents for sensitive communication, enabling a local attacker to access shared notes. The issue is documented across multiple sources (NVD, RH, CNVD, and PT Security) confirming th...

CVE-2025-21057

Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allows local attackers to access shared notes...

EUVD-2025-33676

Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allows local attackers to access shared notes...

EUVD-2025-33681

Out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2025-21049

Samsung SecSettings suffers an improper access control flaw prior to SMR Oct-2025 Release 1. This is exploitable by local attackers and requires user interaction to trigger, potentially exposing sensitive information. The issue is documented across multiple sources (CVE-2025-21049) with a medium ...

CVE-2025-21045

Insecure storage of sensitive information in Galaxy Watch prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information...

CVE-2025-21045

Insecure storage of sensitive information in Galaxy Watch prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information...

PT-2025-41509

Name of the Vulnerable Software and Affected Versions Knox Enterprise versions prior to SMR Oct-2025 Release 1 Description A relative path traversal issue exists in Knox Enterprise prior to SMR Oct-2025 Release 1, potentially allowing local attackers to execute arbitrary code. Recommendations...

PT-2025-41510

Name of the Vulnerable Software and Affected Versions SecSettings versions prior to SMR Oct-2025 Release 1 Description An improper access control issue exists in SecSettings. This allows local attackers to access sensitive information. User interaction is required to trigger this issue...