CVE-2023-30660

The CVE-2023-30660 issue affects Samsung UwbAospAdapterService, with the vulnerable component being getDefaultChipId. It allows local attackers to access the UWB chipset Identifier on devices running versions prior to SMR Jul-2023 Release 1. According to PT-2023-22856, impact is exposure of sensi...

CVE-2023-30669

CVE-2023-30669 affects libsec-ril DoOemFactorySendFactoryTestResult; an out-of-bounds write in this component can allow a local attacker to execute arbitrary code. Affected Samsung devices before SMR Jul-2023 Release 1 are vulnerable. Samsung/Android security updates have been released to address...

CVE-2023-42527

CVE-2023-42527 affects libsec-ril, specifically ProcessWriteFile, with improper input validation prior to Samsung SMR Nov-2023 Release 1. A local attacker could expose sensitive information by exploiting this vulnerability. The issue impacts Samsung mobile devices using libsec-ril and is fixed by...

CVE-2023-42528

CVE-2023-42528 affects Samsung devices via the libsec-ril component, specifically the ProcessNvBuffering path. The root cause is improper input validation, enabling a local attacker to execute arbitrary code. The vulnerability is tied to Samsung’s SMR November 2023 Release 1 remediation; affected...

CVE-2023-42567

CVE-2023-42567 affects the softsimd component. The issue is an improper size check that enables a stack-based buffer overflow in softsimd prior to SMR Dec-2023 Release 1. Documented impact is a potential overflow; exploitation details are not provided in the sources. A remediation path is to upda...

CVE-2026-21058

Improper input validation in Samsung Contacts (pre-SMR Aug-2026 Release 1) lets local attackers delete files using the app's privileges. NVD rates it HIGH (CVSS 7.1, local/low-complexity), while Samsung rates it MEDIUM (6.9). No in-the-wild exploitation is reported. Apply the SMR Aug-2026 Release...

CVE-2026-21061

CVE-2026-21061 concerns the Samsung Dialer, with improper input validation prior to SMR Aug-2026 Release 1. The vulnerability potentially allows remote attackers to access SIM-related functions, but user interaction is required to trigger it. According to the provided metrics, the CVSS base score...

CVE-2026-21063

CVE-2026-21063 affects the AppLock component on Android. The issue is an improper export of Android application components, enabling physical attackers to bypass the app lock function. According to the CVE metrics, the exploit has a base CVSS v4.0 score of 6.8 (Medium) with Attack Vector Physical...

CVE-2023-21497

CVE-2023-21497 affects the mPOS TUI trustlet (Samsung devices) prior to SMR May-2023 Release 1. It arises from an externally-controlled format string vulnerability that could allow a local attacker to access memory addresses. Affected component: mPOS TUI trustlet; root cause: format string handli...

CVE-2024-34618

The CVE-2024-34618 issue is described as an improper access control in a System property prior to Samsung SMR Aug-2024 Release 1, enabling local attackers to access cell-related information on Samsung Mobile devices. Connected sources (e.g., Red Hat and NVD entries) confirm the vulnerability orig...

CVE-2025-21052

The CVE-2025-21052 issue affects the libpadm.so library in Samsung Mobile devices, caused by an out-of-bounds write during the pre-processing stage of JPEG decoding. This vulnerability can lead to memory corruption when exploited locally. Affected versions are libpadm.so prior to SMR Oct-2025 Rel...

CVE-2026-20978

KnoxGuardManager is affected by an improper authorization vulnerability that allows local attackers to bypass the application’s persistence configuration. This issue is reported across multiple sources (CVE-2026-20978) and is tied to SMR Feb-2026 Release 1 for KnoxGuardManager. Affected component...

CVE-2026-21030

CVE-2026-21030 describes an improper access control issue in MediaTek Audio HAL prior to the SMR Jun-2026 Release 1, enabling local attackers to trigger privileged functions. The affected component is MediaTek Audio HAL; root cause is improper access control, with impact described as privileged a...

CVE-2023-30640

CVE-2023-30640 affects PersonaManagerService and is caused by improper access control, enabling local attackers to change configuration. Affected versions are prior to Samsung SMR Jul-2023 Release 1; Red Hat/PRION entries corroborate the same issue. The issue is local in scope with low to moderat...

CVE-2023-30659

CVE-2023-30659 affects SAMSUNG Mobile devices, specifically the Transaction module prior to SMR Jul-2023 Release 1. The root cause is improper input validation, enabling local attackers to perform privileged activities. Impact is described as local privilege escalation with high confidentiality, ...

CVE-2023-30666

The CVE-2023-30666 issue affects libsec-ril and its DoOemImeiSetPreconfig function, with an improper input validation that enables a local attacker to cause an Out-Of-Bounds write. Affected software is the Samsung mobile stack using libsec-ril prior to SMR Jul-2023 Release 1. Impact is localized ...

CVE-2023-30670

CVE-2023-30670 affects Samsung devices via an out-of-bounds write in libsec-ril, specifically BuildIpcFactoryDeviceTestEvent, allowing a local attacker to execute arbitrary code. The issue is described as present in Samsung’s Mobile firmware prior to the SMR Jul-2023 Release 1. The connected reco...

CVE-2024-34607

CVE-2024-34607 affects SamsungNotesService on Samsung Mobile devices prior to SMR Aug-2024 Release 1. The issue is an improper access control that allows local attackers to bypass restrictions on starting services from the background. Documented impact is local, with potential to bypass backgroun...

CVE-2024-34612

CVE-2024-34612 affects libcodec2secmp4vdec.so with an out-of-bounds write prior to SMR Aug-2024 Release 1, enabling local arbitrary code execution. Affected: libcodec2secmp4vdec.so (versions before SMR Aug-2024 Release 1). Root cause: out-of-bounds write in the codec component. Impact: local atta...

CVE-2026-21062

CVE-2026-21062 describes an authorization bypass in SemClipboardService prior to the SMR Aug-2026 Release 1. The issue allows local attackers to access clipboard data. Documents do not provide details on the vulnerable component version ranges beyond the release qualifier, nor on a concrete root ...

CVE-2023-30658

The CVE-2023-30658 issue affects the DataProfile module in Samsung devices (SMR Jul-2023 Release 1). Root cause: improper input validation, enabling a local attacker to perform privileged activities. Impact is described as high, with local attack vector and privileges required as low, no user int...

CVE-2023-30739

Summary (CVE-2023-30739): The issue is an Arbitrary File Descriptor Write vulnerability in the libsec-ril module. The initial description and corroborating sources indicate the root cause is a write to a file descriptor that can be manipulated by a local attacker, enabling arbitrary code executio...

CVE-2023-42563

CVE-2023-42563 affects libFacePreProcessingjni.camera.samsung.so; the issue is an integer overflow in landmarkCopyImageToNative that can trigger heap overflow. Affected versions are prior to Samsung SMR Dec-2023 Release 1. No publicly available fix details are provided in the documents; a tempora...

CVE-2023-42569

CVE-2023-42569 concerns an improper authorization verification in Samsung’s AR Emoji, prior to the SMR Dec-2023 Release 1. The issue allows an attacker to read sandbox data from AR Emoji. Affected: AR Emoji components on Samsung devices. Root cause: improper authorization verification. Impact: re...

CVE-2026-21011

CVE-2026-21011 describes an incorrect privilege assignment in Bluetooth when in Maintenance mode, prior to the SMR Apr-2026 Release 1. This flaw could allow a physical attacker to bypass Extend Unlock. The reporting sources (NVD and CVE feeds) confirm the description and note a Samsung security u...

CVE-2024-34606

CVE-2024-34606 applies to Samsung Mobile devices and affects the SmartThingsService prior to SMR Aug-2024 Release 1. The vulnerability is an improper access control that allows local attackers to bypass restrictions on starting services from the background. Root cause and impact are described as ...

CVE-2024-34616

The CVE-2024-34616 issue affects KnoxDualDARPolicy in Samsung Mobile devices prior to the SMR Aug-2024 Release 1. The root cause is improper handling of insufficient permissions, enabling a local attacker to access sensitive data. Exploitation details are not provided in the documents. Impact is ...

CVE-2026-21066

Improper input validation in libcodec2_sec_flacdec.so (Samsung's FLAC decoder) on Samsung devices prior to the SMR Aug-2026 Release 1 patch allows local attackers to write out-of-bounds memory, potentially enabling privilege escalation. No in-the-wild exploitation is reported. Patch: SMR Aug-2026...

CVE-2023-30647

CVE-2023-30647 is a heap out-of-bounds write vulnerability in the RILD component, specifically in the IpcRxUsimPhoneBookCapa path. It affects RILD prior to SMR Jul-2023 Release 1 and is described as allowing attackers to execute arbitrary code. Remediation per PT-2023-22841 is to update to SMR Ju...

CVE-2023-30661

CVE-2023-30661 affects UwbAospAdapterService in Samsung mobile devices, where getChipInfos exposes the UWB chipset Identifier. The root cause is an Exposure of Sensitive Information vulnerability that allows local attackers with LOW privileges and no user interaction to access sensitive chipset d...

CVE-2026-21007

CVE-2026-21007 concerns Samsung devices with Device Care prior to SMR Apr-2026 Release 1. The issue is an improper check for exceptional conditions in Device Care, enabling physical attackers to bypass Knox Guard. Affected component: Device Care (on Samsung devices). Root cause: improper handling...

CVE-2026-21008

Technical details (affected software, root cause, exploitability, or fixes) are not provided in the supplied documents. Monitor for updates on CVE-2026-21008 as more details may be released.

CVE-2026-21072

A local attacker with low privileges can trigger out-of-bounds memory writes via the VC1 codec in libsavsvc.so on Samsung devices prior to the August 2026 Security Maintenance Release. NVD rates this HIGH (7.8), while Samsung's CNA rates it MEDIUM (5.1). No exploitation evidence is provided. Appl...

CVE-2023-30657

The CVE-2023-30657 issue affects Samsung EnhancedAttestationResult and is caused by improper input validation. The vulnerability allows local attackers to execute privileged activities on affected devices. Samsung’s documentation indicates the vulnerability was addressed in the SMR Jul-2023 Relea...

CVE-2023-30665

CVE-2023-30665 describes an improper input validation vulnerability in OnOemServiceMode within the libsec-ril component, leading to a local out-of-bounds read. Reported as a Samsung mobile/SR patch issue (SMR Jul-2023 Release 1), with exploitation requiring local access and low privileges. Public...

CVE-2025-21006

CVE-2025-21006 describes an out-of-bounds write in the MPEG-4 macroblock handling of the libsavsvc.so library, affecting some Samsung/Android components prior to Android 15. The underlying issue is a memory corruption risk due to improper handling of macro blocks in the MPEG4 codec, allowing a lo...

CVE-2026-20973

CVE-2026-20973 describes an out-of-bounds read in Samsung’s QuramDng image processing library (libimagecodec.quram.so) prior to SMR Jan-2026 Release 1. A remote attacker could access out-of-bounds memory via crafted input (DNG/warp opcode) processed by affected components (e.g., Media Scanner, Ga...

CVE-2026-21071

Improper input validation in the MPEG4 codec within libsavsvc.so allows local attackers to write out-of-bounds memory on Samsung devices prior to the SMR Aug-2026 Release 1 update. NVD rates it HIGH (CVSS 7.8) requiring low privileges; Samsung rates it MEDIUM (CVSS 5.1). No exploitation details a...

CVE-2023-21479

CVE-2023-21479 affects Samsung/Android devices due to an improper authorization weakness in Smart suggestions. The issue allows remote attackers to register a schedule on affected builds. Affected software includes Android 13 prior to SMR Apr-2023 Release 1 and Android 12 with 4.1.01.0. Remediati...

CVE-2024-20882

CVE-2024-20882 describes an out-of-bounds read in the bootloader prior to SMR June-2024 Release 1. The issue enables a physical attacker to access arbitrary data from the device via the bootloader component. The vulnerability is tied to a trusted code path executed with physical access and requir...

CVE-2024-34617

CVE-2024-34617 affects Telephony on affected Samsung devices. The issue is improper handling of insufficient permissions, enabling a local attacker to configure the default Message application via Telephony functionality. Exploitation is local; no user interaction required per the provided metric...

CVE-2025-21001

CVE-2025-21001 affects LeAudioService prior to SMR Jul-2025 Release 1. The issue is improper access control that enables local attackers to stop Auracast broadcasting. Affects Samsung Mobile devices; exploitability is local (L) with low complexity and no user interaction; impact is loss of availa...

CVE-2026-20974

CVE-2026-20974: Samsung/Android SMR Jan-2026 Release 1 patches this issue. It is described as improper input validation in data related to network restrictions, enabling physical attackers to bypass Carrier Relock prior to the SMR release. Connected sources (SVE entries) show affected Android 13–...

CVE-2026-21017

Technical details (affected product/component, root cause, impact, or fix) are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2024-34605

CVE-2024-34605 corresponds to an improper access control issue in SamsungHealthService, affecting versions prior to SMR Aug-2024 Release 1. The vulnerability allows local attackers to bypass restrictions on starting services from the background, resulting in potential unauthorized control from ba...

CVE-2024-34620

CVE-2024-34620 describes an improper privilege management issue in SumeNNService (Samsung Mobile) prior to SMR Aug-2024 Release 1, enabling a local attacker to start a privileged service. The vulnerability is rated HIGH with both CVSS v3.1 metrics indicating LOCAL access, LOW attack complexity, a...

CVE-2025-21009

The CVE-2025-21009 entry describes an out-of-bounds read in decoding a malformed frame header in libsavsvc.so, affecting Android prior to 15. This vulnerability can allow local attackers to cause memory corruption. Evidence across connected records indicates the issue is tied to the libsavsvc.so ...

CVE-2024-34604

CVE-2024-34604 involves improper access control in LedCoverService prior to SMR Aug-2024 Release 1, allowing a local attacker to bypass restrictions on starting services from the background. Affected component: LedCoverService. Root cause: access-control weaknesses enabling background-start bypas...

CVE-2025-20983

CVE-2025-20983 involves an out-of-bounds write in the authentication secret checking path of the KnoxVault trustlet. Affected: KnoxVault trustlet on Samsung devices prior to SMR Jul-2025 Release 1. Root cause: out-of-bounds write when validating the auth secret, enabling local privileged attacker...

CVE-2025-58479

CVE-2025-58479 concerns an out-of-bounds read in libimagecodec.quram.so. Connected documents show a PoC demonstrating an out-of-bounds read/write in Samsung QuramDng image parsing, triggered by a malformed DNG embedded in a JPEG, leading to memory corruption and potential crashes on Samsung devic...