Samsung
Vulnerability activity for Samsung: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 1
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 13
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 2
- With exploit code
- 2
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
- 8.8HighApr 24, 2026Samsung MagicINFO 9 Server Path traversal / file handlingCVE-2024-7399Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to write arbitrary files as system authority.Added to KEV Apr 24, 2026Exploited92% likelyExploit codeMetasploit · NucleiDetection
- 8.8HighNov 10, 2025Samsung Mobile Devices Memory corruptionCVE-2025-21042Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so. This vulnerability could allow remote attackers to execute arbitrary code.Added to KEV Nov 10, 2025Exploited35% likelyExploit code
- 8.8HighSep 12, 2025Samsung Mobile Devices Memory corruptionCVE-2025-21043Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so which allows remote attackers to execute arbitrary code.Added to KEV Oct 2, 2025 · 20 days after publicationExploited2.2% likely
- 9.8CriticalMay 13, 2025Samsung MagicINFO 9 Server Path traversal / file handlingCVE-2025-4632Samsung MagicINFO 9 Server contains a path traversal vulnerability that allows an attacker to write arbitrary file as system authority.Added to KEV May 22, 2025 · 9 days after publicationExploited24% likelyExploit codeNucleiDetection
- 5.0MediumJan 7, 2022Samsung Mobile Devices Memory corruptionCVE-2022-22265Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution.Added to KEV Sep 18, 2023 · 618 days after publicationExploited
- 6.1MediumMar 26, 2021Samsung Mobile Devices Memory corruptionCVE-2021-25372Samsung mobile devices contain an improper boundary check vulnerability within DSP driver that allows for out-of-bounds memory access.Added to KEV Jun 29, 2023 · 824 days after publicationExploited
- 6.1MediumMar 26, 2021Samsung Mobile DevicesCVE-2021-25371Samsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP.Added to KEV Jun 29, 2023 · 824 days after publicationExploited
- 6.4MediumJun 11, 2021Samsung Mobile DevicesCVE-2021-25395Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.Added to KEV Jun 29, 2023 · 747 days after publicationExploited
- 6.4MediumJun 11, 2021Samsung Mobile Devices Memory corruptionCVE-2021-25394Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.Added to KEV Jun 29, 2023 · 747 days after publicationExploited
- 3.3LowOct 6, 2021Samsung Mobile DevicesCVE-2021-25489Samsung mobile devices contain an improper input validation vulnerability within the modem interface driver that results in a format string bug leading to kernel panic.Added to KEV Jun 29, 2023 · 630 days after publicationExploited
- 7.3HighOct 6, 2021Samsung Mobile Devices Memory corruptionCVE-2021-25487Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a buffer in set_skb_priv(), leading to remote code execution by dereference of an invalid function pointer.Added to KEV Jun 29, 2023 · 630 days after publicationExploited
- 4.4MediumMay 4, 2023Samsung Mobile Devices Information disclosureCVE-2023-21492Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization (ASLR) bypass.Added to KEV May 19, 2023 · 15 days after publicationExploited2.6% likely
- 6.1MediumMar 26, 2021Samsung Mobile Devices Memory corruptionCVE-2021-25370Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369.Added to KEV Nov 8, 2022 · 591 days after publicationExploited
- 6.2MediumMar 26, 2021Samsung Mobile Devices Information disclosureCVE-2021-25369Samsung mobile devices using Mali GPU contains an improper access control vulnerability in sec_log file. Exploitation of the vulnerability exposes sensitive kernel information to the userspace. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25370.Added to KEV Nov 8, 2022 · 591 days after publicationExploited1.1% likely
- 4.4MediumMar 4, 2021Samsung Mobile Devices Privilege escalationCVE-2021-25337Samsung mobile devices contain an improper access control vulnerability in clipboard service which allows untrusted applications to read or write arbitrary files. This vulnerability was chained with CVE-2021-25369 and CVE-2021-25370.Added to KEV Nov 8, 2022 · 613 days after publicationExploited2.8% likely
Recent
- 3.3LowAug 10, 2026Samsung android Auth bypass / access controlCVE-2026-21062Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.
- 5.5MediumJul 13, 2026Samsung rlottie Memory corruptionCVE-2026-15551Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects .
- 8.8HighMay 28, 2026Samsung escargot Memory corruptionCVE-2026-8915Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: 36f5fb58366a67b713c02f6fd985e924fcc09e31.
- 5.5MediumMay 13, 2026Samsung android Information disclosureCVE-2026-21022Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.
- 6.8MediumMay 13, 2026Samsung androidCVE-2026-21021Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity.
- 7.8HighMay 13, 2026Samsung androidCVE-2026-21020Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers to trigger privileged functions.
- 6.7MediumMay 13, 2026Samsung android Memory corruptionCVE-2026-21018Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary code.
- 8.8HighApr 24, 2026Samsung MagicINFO 9 Server Path traversal / file handlingCVE-2024-7399Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to write arbitrary files as system authority.Exploited92% likelyExploit codeMetasploit · NucleiDetection
- 8.1HighApr 13, 2026Samsung escargot Memory corruptionCVE-2026-25208Integer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
- 8.4HighJan 5, 2026Samsung exynos 1380 firmware Memory corruptionCVE-2025-53966An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow during handling of an IOCTL message.
- 8.8HighNov 10, 2025Samsung Mobile Devices Memory corruptionCVE-2025-21042Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so. This vulnerability could allow remote attackers to execute arbitrary code.Exploited35% likelyExploit code
- 6.5MediumNov 4, 2025Samsung exynos 1480 firmware Memory corruptionCVE-2025-54335An issue was discovered in the GPU driver in Samsung Mobile Processor Exynos 1480, 2400, 1580, 2500. There is a use-after-free in the Xclipse GPU Driver.
- 9.8CriticalNov 4, 2025Samsung exynos 1280 firmware Memory corruptionCVE-2025-52910An issue was discovered in the GPU in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1330, 1380, 1480, 2400. A Use-After-Free leads to privilege escalation.
- 8.8HighSep 12, 2025Samsung Mobile Devices Memory corruptionCVE-2025-21043Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so which allows remote attackers to execute arbitrary code.Exploited2.2% likely
- 9.8CriticalMay 13, 2025Samsung MagicINFO 9 Server Path traversal / file handlingCVE-2025-4632Samsung MagicINFO 9 Server contains a path traversal vulnerability that allows an attacker to write arbitrary file as system authority.Exploited24% likelyExploit codeNucleiDetection
- 5.0MediumJan 7, 2022Samsung Mobile Devices Memory corruptionCVE-2022-22265Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution.Exploited
- 7.3HighOct 6, 2021Samsung Mobile Devices Memory corruptionCVE-2021-25487Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a buffer in set_skb_priv(), leading to remote code execution by dereference of an invalid function pointer.Exploited
- 3.3LowOct 6, 2021Samsung Mobile DevicesCVE-2021-25489Samsung mobile devices contain an improper input validation vulnerability within the modem interface driver that results in a format string bug leading to kernel panic.Exploited
- 6.4MediumJun 11, 2021Samsung Mobile Devices Memory corruptionCVE-2021-25394Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.Exploited
- 6.4MediumJun 11, 2021Samsung Mobile DevicesCVE-2021-25395Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.Exploited
- 6.1MediumMar 26, 2021Samsung Mobile DevicesCVE-2021-25371Samsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP.Exploited
- 6.1MediumMar 26, 2021Samsung Mobile Devices Memory corruptionCVE-2021-25372Samsung mobile devices contain an improper boundary check vulnerability within DSP driver that allows for out-of-bounds memory access.Exploited
- 4.4MediumMay 4, 2023Samsung Mobile Devices Information disclosureCVE-2023-21492Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization (ASLR) bypass.Exploited2.6% likely
- 4.4MediumFeb 9, 2023Samsung android Information disclosureCVE-2023-21435Exposure of Sensitive Information vulnerability in Fingerprint TA prior to SMR Feb-2023 Release 1 allows attackers to access the memory address information via log.
- 4.4MediumMar 4, 2021Samsung Mobile Devices Privilege escalationCVE-2021-25337Samsung mobile devices contain an improper access control vulnerability in clipboard service which allows untrusted applications to read or write arbitrary files. This vulnerability was chained with CVE-2021-25369 and CVE-2021-25370.Exploited2.8% likely
- 6.2MediumMar 26, 2021Samsung Mobile Devices Information disclosureCVE-2021-25369Samsung mobile devices using Mali GPU contains an improper access control vulnerability in sec_log file. Exploitation of the vulnerability exposes sensitive kernel information to the userspace. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25370.Exploited1.1% likely
- 6.1MediumMar 26, 2021Samsung Mobile Devices Memory corruptionCVE-2021-25370Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369.Exploited
Top products
- android5 CVEs in the last year
- escargot2 CVEs in the last year
- rlottie1 CVE in the last year
- Mobile Devices1 CVE in the last year, 1 exploited
- MagicINFO 9 Server1 CVE in the last year, 1 exploited
- exynos 1480 firmware1 CVE in the last year
- exynos 1380 firmware1 CVE in the last year
- exynos 1280 firmware1 CVE in the last year, 1 critical
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.