Browse CVEs

HIGH 7.8 CVE-2025-20890 Out-of-bounds write in decoding frame buffer in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with pr… Android Mitigation only Fix from $1,9502025-02-04 MEDIUM 5.9 CVE-2025-20892 Protection Mechanism Failure in bootloader prior to SMR Jan-2025 Release 1 allows physical attackers to allow to execute fastboot command. User inter… Android Mitigation only Fix from $1,6002025-02-04 MEDIUM 5.5 CVE-2025-20891 Out-of-bounds read in decoding malformed bitstream of video thumbnails in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read… Android Mitigation only Fix from $1,6002025-02-04 MEDIUM 5.1 CVE-2025-20893 Improper access control in NotificationManager prior to SMR Jan-2025 Release 1 allows local attackers to change the configuration of notifications. Android Mitigation only Fix from $1,6002025-02-04 HIGH 7.8 CVE-2025-20882 Out-of-bounds write in accessing uninitialized memory for svc1td in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute ar… Android Mitigation only Fix from $1,9502025-02-04 HIGH 7.8 CVE-2025-20888 Out-of-bounds write in handling the block size for smp4vtd in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrar… Android Mitigation only Fix from $1,9502025-02-04 MEDIUM 6.7 CVE-2025-20885 Out-of-bounds write in softsim trustlet prior to SMR Jan-2025 Release 1 allows local privileged attackers to cause memory corruption. Android Mitigation only Fix from $1,6002025-02-04 MEDIUM 5.5 CVE-2025-20887 Out-of-bounds read in accessing table used for svp8t in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitrary memory.… Android Mitigation only Fix from $1,6002025-02-04 MEDIUM 5.5 CVE-2025-20889 Out-of-bounds read in decoding malformed bitstream for smp4vtd in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitra… Android Mitigation only Fix from $1,6002025-02-04 HIGH 7.8 CVE-2025-20881 Out-of-bounds write in accessing buffer storing the decoded video frames in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to ex… Android Mitigation only Fix from $1,9502025-02-04 MEDIUM 6.5 CVE-2024-46921 An issue was discovered in Samsung Mobile Processor and Modem Exynos 9820, 9825, 980, 990, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W100… Exynos 1080 Firmware Mitigation only Fix from $1,6002025-01-13 MEDIUM 6.5 CVE-2024-46920 An issue was discovered in Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 850, 1080, 2100, and 1280. Lack of a length check leads to a stack o… Exynos 9820 Firmware Mitigation only Fix from $1,6002025-01-13 MEDIUM 5.3 CVE-2024-46919 An issue was discovered in Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 850, 1080, 2100, and 1280. Lack of a length check leads to a stack o… Exynos 9820 Firmware Mitigation only Fix from $1,6002025-01-13 CRITICAL 9.8 CVE-2024-49415 Out-of-bound write in libsaped.so prior to SMR Dec-2024 Release 1 allows remote attackers to execute arbitrary code. Android Mitigation only Fix from $2,3002024-12-03 HIGH 7.8 CVE-2024-49413 Improper Verification of Cryptographic Signature in SmartSwitch prior to SMR Dec-2024 Release 1 allows local attackers to install malicious applicati… Android Mitigation only Fix from $1,9502024-12-03 HIGH 7.8 CVE-2024-49410 Out-of-bounds write in libswmfextractor.so prior to SMR Dec-2024 Release 1 allows local attackers to execute arbitrary code. Android Mitigation only Fix from $1,9502024-12-03 HIGH 8.1 CVE-2024-39890 An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 13… Exynos Modem 5123 Firmware Mitigation only Fix from $1,9502024-12-02 HIGH 7.0 CVE-2024-39343 An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, Modem 5123, and Mod… Exynos 2100 Firmware Mitigation only Fix from $1,9502024-12-02 HIGH 7.8 CVE-2024-34678 Out-of-bounds write in libsapeextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption. Android Mitigation only Fix from $1,9502024-11-06 HIGH 7.1 CVE-2024-34679 Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone privilege. Android Mitigation only Fix from $1,9502024-11-06 HIGH 7.1 CVE-2024-49401 Improper input validation in Settings Suggestions prior to SMR Nov-2024 Release 1 allows local attackers to launch privileged activities. Android Mitigation only Fix from $1,9502024-11-06 MEDIUM 5.5 CVE-2024-34680 Use of implicit intent for sensitive communication in WlanTest prior to SMR Nov-2024 Release 1 allows local attackers to get sensitive information. Android Mitigation only Fix from $1,6002024-11-06 HIGH 7.3 CVE-2024-34676 Out-of-bounds write in parsing subtitle file in libsubextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption.… Android Mitigation only Fix from $1,9502024-11-06 MEDIUM 5.5 CVE-2024-34673 Improper Input Validation in IpcProtocol in Modem prior to SMR Nov-2024 Release 1 allows local attackers to cause Denial-of-Service. Android Mitigation only Fix from $1,6002024-11-06 MEDIUM 5.1 CVE-2024-45185 An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 13… Exynos 1080 Firmware Mitigation only Fix from $1,6002024-11-04 MEDIUM 6.2 CVE-2024-45184 An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with chipset Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, … Exynos 9820 Firmware Mitigation only Fix from $1,6002024-10-11 HIGH 8.8 CVE-2024-34669 Out-of-bounds write in parsing h.263+ format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code wi… Android Mitigation only Fix from $1,9502024-10-08 HIGH 8.8 CVE-2024-34665 Out-of-bounds write in parsing h.264 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code wit… Android Mitigation only Fix from $1,9502024-10-08 HIGH 8.8 CVE-2024-34666 Out-of-bounds write in parsing h.264 format in a specific mode in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute… Android Mitigation only Fix from $1,9502024-10-08 HIGH 8.8 CVE-2024-34667 Out-of-bounds write in parsing h.265 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code wit… Android Mitigation only Fix from $1,9502024-10-08