CVE-2026-20989

EUVD-2026-12295 and PT-2026-25594 describe improper verification of cryptographic signatures in Font Settings prior to SMR Mar-2026 Release 1, allowing physical attackers to load a custom font. Root cause: insufficient signature verification for font assets. The NC SC advisory confirms Google And...

CVE-2023-21427

CVE-2023-21427 affects Samsung NfcTile prior to SMR Jan-2023 Release 1. The issue is an improper access control that could allow an attacker to use NFC without user recognition. Affected software is NfcTile with versions before the Jan-2023 release; root cause is insufficient access control on NF...

CVE-2023-21428

CVE-2023-21428 affects TelephonyUI prior to SMR Jan-2023 Release 1. The issue is due to improper input validation, allowing an attacker to configure Preferred Call. The patch reportedly removes unused code. Impact per available data includes local access with low to moderate severity (I/L, A/N). ...

CVE-2024-20857

CVE-2024-20857 affects CocktailBarService: startListening exposes information due to improper access control, with affected versions prior to SMR May-2024 Release 1. Exploitation details are not provided in the documents. PT-Security lists a workaround to disable startListening as a temporary mea...

CVE-2024-20863

SNAP in HAL is affected (prior to SMR May-2024 Release 1) by an out-of-bounds write vulnerability that allows local privileged attackers to execute arbitrary code. The issue is evidenced by PT-2024-18774 and corroborated by multiple sources referencing the HAL SNAP exposure and the same impact. R...

CVE-2024-20892

CVE-2024-20892 concerns Samsung Mobile devices and targets the FilterProvider component. The public reports state an improper verification of the signature in FilterProvider prior to SMR Jul-2024 Release 1, enabling a local attacker to trigger privileged behaviors. The exploit requires user inter...

CVE-2024-34594

CVE-2024-34594 involves exposure of sensitive information in the proc filesystem on Samsung Mobile devices prior to SMR Jul-2024 Release 1, enabling local attackers to read kernel memory addresses. Affected product: Samsung Mobile devices; vulnerability arises from procfs data exposure that leaks...

CVE-2025-20937

CVE-2025-20937 describes an out-of-bounds write in the Keymaster trustlet prior to Samsung SMR May-2025 Release 1. The vulnerability enables local privileged attackers to write out-of-bounds memory, potentially causing memory corruption with high impact (confidentiality/ integrity/ availability)....

CVE-2025-20957

Summary: CVE-2025-20957 refers to an improper access control in SmartManagerCN. Local attackers could launch arbitrary activities with SmartManagerCN privileges due to insufficient authorization controls before SMR May-2025 Release 1. Affected software/component: SmartManagerCN (Smart Manager) pr...

CVE-2025-20962

The CVE-2025-20962 entry concerns Samsung’s SpenGesture service. Affected: SpenGesture service versions prior to SMR May-2025 Release 1. Cause: improper handling of insufficient permissions. Effect: local attackers could track the S Pen position. Mitigation: update to SMR May-2025 Release 1 or la...

CVE-2025-20964

CVE-2025-20964 describes an out-of-bounds write in parsing media files within the libsavsvc.so component, enabling local attackers to write memory outside allocated buffers. Multiple sources corroborate the issue and link it to Samsung SMR updates; Samsung’s advisory references a May-2025 SMR rel...

CVE-2023-21453

The CVE-2023-21453 issue affects SoftSim TA prior to SMR Mar-2023 Release 1. Root cause: improper input validation in SoftSim TA, enabling local attackers to access protected data. Affected component: SoftSim TA (pre-Release 1). Impact: unauthorized data access with local attack vector; publicati...

CVE-2023-21460

CVE-2023-21460 concerns Samsung SecSettings with improper authentication prior to SMR Mar-2023 Release 1. The vulnerability enables an attacker with local access to reset the SecSettings configuration. The issue is described consistently across sources as a failure of authentication in SecSetting...

CVE-2024-20858

The CVE-2024-20858 issue relates to CocktailBarService’s setCocktailHostCallbacks function. Affected: CocktailBarService prior to SMR May-2024 Release 1. Risk: improper access control allowing local attackers to access information from the current application (confidentiality impact high per CVE)...

CVE-2024-20885

CVE-2024-20885 affects Samsung Dialer prior to SMR May-2024 Release 1. The vulnerability is an improper component protection issue that allows local attackers to place a call without proper permission. Impact is described as local, with low to medium severities in provided metrics (CVSS base scor...

CVE-2024-20897

CVE-2024-20897 affects the FCM function in Samsung IMS service (pre-SMR Jul-2024 Release 1). The root cause is use of implicit intents for sensitive communications, enabling local attackers to obtain sensitive information. Impact is described as local access leading to information disclosure. Rem...

CVE-2024-49422

CVE-2024-49422 describes a protection mechanism failure in the bootloader of Samsung mobile devices. Prior to SMR Oct-2024 Release 1, the bootloader protection can be bypassed by a hardware fault injection, allowing a physical attacker to reset the lockscreen failure count. The exploit requires u...

CVE-2025-20944

The CVE-2025-20944 entry concerns an out-of-bounds read in parsing audio data in libsavsac.so before the SMR Apr-2025 Release 1. Affected component: libsavsac.so (audio parsing). Root cause: improper bounds checking leads to reading memory outside the allocated region when processing input data. ...

CVE-2023-21456

CVE-2023-21456 affects Galaxy Themes Service prior to SMR Mar-2023 Release 1, enabling path traversal to access arbitrary files with system UID. Root cause: path traversal in Galaxy Themes Service. Impact: high confidentiality impact; no explicit exploitation status in provided documents. Remedia...

CVE-2023-30691

Affected software: Samsung Mobile devices with SMR Aug-2023 Release 1. Vulnerable component: AuthenticationConfig affected by a parcel mismatch, enabling local privilege escalation. Root cause: Parcel mismatch in AuthenticationConfig as described in multiple sources; exact internal module details...

CVE-2023-30697

CVE-2023-30697 : An improper input validation in IpcTxCfgSetSimlockPayload within Samsung libsec-ril leads to an out-of-bounds write. Affected: Samsung Mobile devices with SMR Aug-2023 Release 1 and related Samsung patches. Impact is described as high for confidentiality, integrity, and availabil...

CVE-2023-30708

CVE-2023-30708 concerns Samsung devices’ SecSettings prior to SMR Sep-2023 Release 1. The issue is described as an improper authentication flaw that allows an attacker to access the Captive Portal Wi‑Fi while the device is in Reactivation Lock status. Concrete details across connected sources ind...

CVE-2023-42531

CVE-2023-42531 concerns an improper access control in the SmsController prior to SMR Nov-2023 Release1. The vulnerability allows local attackers to bypass restrictions on starting activities from the background. Affected component: SmsController (Samsung Mobile/Samsung SMR release lineage). Root ...

CVE-2023-42537

The CVE-2023-42537 issue affects/libsaped, specifically the function get_head_crc. The vulnerability stems from improper input validation, enabling a local attacker to cause out-of-bounds reads and writes before the SMR Nov-2023 Release 1. The affected component is the get_head_crc routine in lib...

CVE-2024-20842

CVE-2024-20842 relates to an Improper Input Validation in libsec-ril handling of APDU commands. The issue allows locally privileged attackers to write out-of-bounds memory. Affected software is libsec-ril prior to Samsung SMR Apr-2024 Release 1. Remediation is to update to SMR Apr-2024 Release 1 ...

CVE-2024-20855

The vulnerability CVE-2024-20855 affects the multitasking framework (Samsung Mobile devices) with improper access control. Versions prior to SMR May-2024 Release 1 allow physical attackers to access an unlocked screen for a period of time. Remediation: update to SMR May-2024 Release 1 or later. N...

CVE-2024-20864

CVE-2024-20864 affects DarManagerService. The connected sources confirm an improper access-control flaw in DarManagerService that enables local attackers to monitor system resources. Impact is described as local resource monitoring with a base CVSSv3.1 score of 5.5 (Medium), requiring local acces...

CVE-2024-20883

CVE-2024-20883 involves incorrect use of a privileged API in BatteryStatsService.registerBatteryStatsCallback. Affected component: BatteryStatsService (Android/Samsung). Prior to SMR Jun-2024 Release 1, local attackers with low privileges and no user interaction could exploit the vulnerable API t...

CVE-2023-21459

CVE-2023-21459 is a use-after-free vulnerability in the Samsung decon driver, pre-SMR Mar-2023 Release 1. The issue enables memory access faults due to a post-release reuse of resources in the decon driver. Affected component: decon driver (Samsung mobile devices). Impact is described as memory a...

CVE-2023-21499

The vulnerability CVE-2023-21499 affects the mPOS TUI trustlet on Samsung devices, specifically the TA_Communication_mpos_encrypt_pin function. It is an out-of-bounds write in this component prior to SMR May-2023 Release 1, enabling local attackers to execute arbitrary code. Exploitation details ...

CVE-2024-20860

Summary of CVE-2024-20860 : An improper export of Android application components vulnerability in TelephonyUI affects Samsung mobile devices. The root cause is mis-export of components within TelephonyUI, enabling local attackers to reboot the device without proper permission. The vulnerability i...

CVE-2024-49411

The CVE-2024-49411 entry describes a path traversal vulnerability in ThemeCenter prior to SMR Dec-2024 Release 1. It allows a physical attacker to copy APK files to arbitrary paths using ThemeCenter privileges. Affected software: ThemeCenter (versions before SMR Dec-2024 Release 1). Reported impa...

CVE-2025-20893

CVE-2025-20893 affects Samsung Mobile devices via an improper access control flaw in NotificationManager, enabling local attackers to modify notification configurations. The issue is described across multiple sources (NVD, Red Hat, CIRCL, CNNVD, and NCSC) as a local-privilege-like impact with low...

CVE-2025-20907

CVE-2025-20907 affects Samsung Find prior to SMR Feb-2025 Release 1. The issue is improper privilege management that allows local privileged attackers to disable Samsung Find. Affected: Samsung Find versions before SMR Feb-2025 Release 1. Impact: local attacker with sufficient privileges can disa...

CVE-2023-21423

CVE-2023-21423 affects Samsung ChnFileShareKit prior to SMR Jan-2023 Release 1. The root cause is improper authorization, enabling an attacker to control BLE advertising without permission via an unprotected action. Impact is described as local control with confidentiality and integrity implicati...

CVE-2023-21458

CVE-2023-21458 involves an improper privilege management in Samsung System UI’s PhoneStatusBarPolicy. This vulnerability affects System UI versions prior to SMR Mar-2023 Release 1, where an attacker could turn off Do Not Disturb via an unprotected intent. The issue is base on local access with lo...

CVE-2023-30664

CVE-2023-30664 is an improper input validation vulnerability in Samsung Mobile devices, originating from the RegisteredMSISDN module in the SMR Jul-2023 Release 1. It enables local attackers to launch privileged activities. The issue is tied to Samsung’s patch cycle, with remediation provided in ...

CVE-2023-30687

CVE-2023-30687 is an out-of-bounds write in libsec-ril’s RmtUimApdu. The issue affects Samsung Mobile devices and is exploitable locally to run arbitrary code prior to SMR Aug-2023 Release 1. The advisory indicates that Samsung released updates in the SMR Aug-2023 Release 1 cycle to address this,...

CVE-2023-30692

CVE-2023-30692 affects Samsung SMR Oct-2023 Release 1: Evaluator with improper input validation, enabling local attackers to launch privileged activities. Affected: Evaluator versions prior to SMR Oct-2023 Release 1. Impact: local privilege escalation; exploitation details are not provided in the...

CVE-2024-20846

CVE-2024-20846 describes an out-of-bounds write vulnerability in the libsavsac.so module when decoding hcr. A local attacker could potentially execute arbitrary code due to this flaw in versions prior to SMR Apr-2024 Release 1. A remediation is to update to SMR Apr-2024 Release 1 or later; a temp...

CVE-2024-34590

CVE-2024-34590 affects librtp.so (pre-SMR Jul-2024 Release 1). The vulnerability stems from improper input validation when parsing an item type from RTCP SDES packets, enabling remote denial of service with user interaction required. Affected versions are librtp.so prior to SMR Jul-2024 Release 1...

CVE-2024-49402

The CVE-2024-49402 entry concerns Samsung Dressroom. Affected software: Dressroom prior to SMR Nov-2024 Release 1. Root cause: improper input validation that enables a physical attacker to access data across multiple user profiles. Impact: cross-profile data exposure on vulnerable devices; CVSS m...

CVE-2025-20963

CVE-2025-20963 involves an out-of-bounds write during memory initialization in the library libsavsvc.so, exposing local attackers to write past the allocated memory. This vulnerability is tied to Samsung SMR May-2025 Release 1; Samsung security update disclosures reference this patch cycle as the...

CVE-2026-20981

CVE-2026-20981 affects Samsung FacAtFunction prior to the SMR Feb-2026 Release 1. The issue is due to improper input validation in FacAtFunction, enabling a physically present, privileged attacker to execute arbitrary commands with system privileges. Multiple sources (NVD/Red Hat/Samsung advisori...

CVE-2023-30706

CVE-2023-30706 affects Samsung Keyboard prior to SMR Sep-2023 Release 1, where improper authorization could allow a user with system privileges to read arbitrary files. The issue is tied to Samsung Keyboard in Samsung mobile devices; root cause described as improper authorization. Impact stated i...

CVE-2023-30720

CVE-2023-30720 describes a PendingIntent hijacking vulnerability in Samsung Mobile devices’ LmsAssemblyTrackerCTC, exploitable by a local attacker to gain arbitrary file access. The issue affects LmsAssemblyTrackerCTC prior to the SMR Sep-2023 Release 1. The root cause is improper PendingIntent h...

CVE-2024-20833

The CVE-2024-20833 entry describes a use-after-free issue in the Samsung Mobile software component pub_crypto_recv_msg , triggered by a race condition prior to the SMR Mar-2024 Release 1. The vulnerability allows local attackers with system privilege to cause memory corruption. Documents consiste...

CVE-2025-20952

Summary of CVE-2025-20952 (Samsung Mdecservice) : Affected component is Mdecservice prior to SMR Apr-2025 Release 1. The vulnerability is due to improper access control, enabling local attackers to access arbitrary files with system privilege. Evidence across sources confirms the issue exists in ...

CVE-2023-21422

The CVE-2023-21422 entry relates to Samsung’s WifiSevice, where the function semAddPublicDnsAddr allows binding the WifiService to set a custom DNS server without permission. Affected are WifiSevice versions prior to SMR Jan-2023 Release 1. The root cause is improper authorization in semAddPublic...

CVE-2023-21449

The CVE-2023-21449 entry concerns the Samsung Call application with improper access control, enabling local attackers to access sensitive information without permission. Affected component is the Call application (prior to SMR Mar-2023 Release 1); root cause is improper access control. Public det...