7322 matches found
CVE-2025-20910
Incorrect default permission in Galaxy Watch Gallery prior to SMR Mar-2025 Release 1 allows local attackers to access data in Galaxy Watch Gallery...
CVE-2025-20912
Incorrect default permission in DiagMonAgent prior to SMR Mar-2025 Release 1 allows local attackers to access data within Galaxy Watch...
CVE-2025-20903
Improper access control in SecSettingsIntelligence prior to SMR Mar-2025 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...
CVE-2025-20903
Improper access control in SecSettingsIntelligence prior to SMR Mar-2025 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...
CVE-2025-20933
Samsung Notes contains a BMP image parsing vulnerability (CVE-2025-20933): an out-of-bounds read is possible due to inadequate validation when parsing BMP data. Affected versions are prior to 4.4.26.71, with local attackers able to read memory outside bounds. The issue is detailed in multiple sou...
CVE-2025-20931
Out-of-bounds write in parsing bmp image in Samsung Notes prior to version 4.4.26.71 allows local attackers to execute arbitrary code...
CVE-2025-20930
Out-of-bounds read in parsing jpeg image in Samsung Notes prior to version 4.4.26.71 allows local attackers to read out-of-bounds memory...
CVE-2025-20928
Out-of-bounds read in parsing wbmp image in Samsung Notes prior to vaersion 4.4.26.71 allows local attackers to access out-of-bounds memory...
CVE-2025-20927
CVE-2025-20927 affects Samsung Notes. Description: an out-of-bounds read in parsing image data can allow a local attacker to access memory. Affected versions are Samsung Notes prior to 4.4.26.71. Remediation: update to 4.4.26.71 or later. This summary pulls from Samsung/Red Hat/NVD entries; explo...
CVE-2025-20926
CVE-2025-20926 affects Samsung My Files on Android 14, prior to version 15.0.07.5. Root cause: improper export of Android application components. Impact: local attackers with My Files privileges may access files within My Files. Exploitation status and in-the-wild details are not provided in the ...
CVE-2025-20923
Improper access control in Galaxy Wearable prior to version 2.2.61.24112961 allows local attackers to launch arbitrary activity with Galaxy Wearable privilege...
CVE-2025-20923
CVE-2025-20923 : Affects Galaxy Wearable. The issue is an access control flaw in Galaxy Wearable prior to version 2.2.61.24112961, allowing local attackers to launch arbitrary activities with Galaxy Wearable privileges. The vulnerability is described as an improper access control error; no exploi...
CVE-2025-20923
Improper access control in Galaxy Wearable prior to version 2.2.61.24112961 allows local attackers to launch arbitrary activity with Galaxy Wearable privilege...
CVE-2025-20912
Incorrect default permission in DiagMonAgent prior to SMR Mar-2025 Release 1 allows local attackers to access data within Galaxy Watch...
CVE-2025-20912
Incorrect default permission in DiagMonAgent prior to SMR Mar-2025 Release 1 allows local attackers to access data within Galaxy Watch...
CVE-2025-20912
CVE-2025-20912 affects DiagMonAgent on Samsung Mobile devices and Galaxy Watch. The root cause is an incorrect default permission setting in DiagMonAgent prior to SMR Mar-2025 Release 1, enabling local attackers to access data within Galaxy Watch. The CVE is documented with a CVSS v3.1 vector (Lo...
CVE-2025-20911
CVE-2025-20911 describes improper access control in the Samsung sem_wifi service before SMR Mar-2025 Release 1, enabling privileged local attackers to update the MAC address of Galaxy Watch devices. Core details in public feeds indicate the issue is tied to a local-privilege scenario with high pr...
CVE-2025-20911
Improper access control in semwifi service prior to SMR Mar-2025 Release 1 allows privileged local attackers to update MAC address of Galaxy Watch...