Browse CVEs

MEDIUM 5.5 CVE-2025-20913 Out-of-bounds read in applying binary of drawing content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory. Notes 4.4.26.71+ Fix from $1,6002025-03-06 MEDIUM 6.5 CVE-2025-20908 Use of insufficiently random values in Auracast prior to SMR Mar-2025 Release 1 allows adjacent attackers to access Auracast broadcasting. Android Mitigation only Fix from $1,6002025-03-06 MEDIUM 6.2 CVE-2025-20910 Incorrect default permission in Galaxy Watch Gallery prior to SMR Mar-2025 Release 1 allows local attackers to access data in Galaxy Watch Gallery. Wear Os Mitigation only Fix from $1,6002025-03-06 MEDIUM 6.2 CVE-2025-20912 Incorrect default permission in DiagMonAgent prior to SMR Mar-2025 Release 1 allows local attackers to access data within Galaxy Watch. Wear Os Mitigation only Fix from $1,6002025-03-06 MEDIUM 5.5 CVE-2025-20909 Use of implicit intent for sensitive communication in Settings prior to SMR Mar-2025 Release 1 allows local attackers to access sensitive information. Android Mitigation only Fix from $1,6002025-03-06 HIGH 7.3 CVE-2025-20903 Improper access control in SecSettingsIntelligence prior to SMR Mar-2025 Release 1 allows local attackers to launch privileged activities. User inter… Android Mitigation only Fix from $1,9502025-03-06 HIGH 7.5 CVE-2024-46922 An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The absence of a null check leads to a Denial of Service at amdgpu_cs_parse… Exynos 1480 Firmware Mitigation only Fix from $1,9502025-02-12 HIGH 7.5 CVE-2024-46923 An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. The absence of a null check leads to a Denial of Service at amdgpu_c… Exynos 2200 Firmware Mitigation only Fix from $1,9502025-02-12 MEDIUM 6.7 CVE-2025-20904 Out-of-bounds write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privileged attackers to cause memory corruption. Android Mitigation only Fix from $1,6002025-02-04 MEDIUM 6.7 CVE-2025-20905 Out-of-bounds read and write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privileged attackers to read and write out-of-bounds m… Android Mitigation only Fix from $1,6002025-02-04 HIGH 7.8 CVE-2025-20890 Out-of-bounds write in decoding frame buffer in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with pr… Android Mitigation only Fix from $1,9502025-02-04 MEDIUM 5.9 CVE-2025-20892 Protection Mechanism Failure in bootloader prior to SMR Jan-2025 Release 1 allows physical attackers to allow to execute fastboot command. User inter… Android Mitigation only Fix from $1,6002025-02-04 MEDIUM 5.5 CVE-2025-20891 Out-of-bounds read in decoding malformed bitstream of video thumbnails in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read… Android Mitigation only Fix from $1,6002025-02-04 MEDIUM 5.5 CVE-2025-20896 Use of implicit intent for sensitive communication in EasySetup prior to version 11.1.18 allows local attackers to access sensitive information. Easysetup 11.1.18+ Fix from $1,6002025-02-04 MEDIUM 5.1 CVE-2025-20893 Improper access control in NotificationManager prior to SMR Jan-2025 Release 1 allows local attackers to change the configuration of notifications. Android Mitigation only Fix from $1,6002025-02-04 HIGH 7.8 CVE-2025-20882 Out-of-bounds write in accessing uninitialized memory for svc1td in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute ar… Android Mitigation only Fix from $1,9502025-02-04 HIGH 7.8 CVE-2025-20888 Out-of-bounds write in handling the block size for smp4vtd in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrar… Android Mitigation only Fix from $1,9502025-02-04 MEDIUM 6.7 CVE-2025-20885 Out-of-bounds write in softsim trustlet prior to SMR Jan-2025 Release 1 allows local privileged attackers to cause memory corruption. Android Mitigation only Fix from $1,6002025-02-04 MEDIUM 5.5 CVE-2025-20887 Out-of-bounds read in accessing table used for svp8t in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitrary memory.… Android Mitigation only Fix from $1,6002025-02-04 MEDIUM 5.5 CVE-2025-20889 Out-of-bounds read in decoding malformed bitstream for smp4vtd in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitra… Android Mitigation only Fix from $1,6002025-02-04 HIGH 7.8 CVE-2025-20881 Out-of-bounds write in accessing buffer storing the decoded video frames in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to ex… Android Mitigation only Fix from $1,9502025-02-04 MEDIUM 6.5 CVE-2024-46921 An issue was discovered in Samsung Mobile Processor and Modem Exynos 9820, 9825, 980, 990, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W100… Exynos 1080 Firmware Mitigation only Fix from $1,6002025-01-13 MEDIUM 6.5 CVE-2024-46920 An issue was discovered in Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 850, 1080, 2100, and 1280. Lack of a length check leads to a stack o… Exynos 9820 Firmware Mitigation only Fix from $1,6002025-01-13 MEDIUM 5.3 CVE-2024-46919 An issue was discovered in Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 850, 1080, 2100, and 1280. Lack of a length check leads to a stack o… Exynos 9820 Firmware Mitigation only Fix from $1,6002025-01-13 CRITICAL 9.8 CVE-2024-49415 Out-of-bound write in libsaped.so prior to SMR Dec-2024 Release 1 allows remote attackers to execute arbitrary code. Android Mitigation only Fix from $2,3002024-12-03 HIGH 7.8 CVE-2024-49413 Improper Verification of Cryptographic Signature in SmartSwitch prior to SMR Dec-2024 Release 1 allows local attackers to install malicious applicati… Android Mitigation only Fix from $1,9502024-12-03 MEDIUM 5.5 CVE-2024-49416 Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to get sensitive information. Smartthings 1.8.21+ Fix from $1,6002024-12-03 HIGH 7.8 CVE-2024-49410 Out-of-bounds write in libswmfextractor.so prior to SMR Dec-2024 Release 1 allows local attackers to execute arbitrary code. Android Mitigation only Fix from $1,9502024-12-03 HIGH 8.1 CVE-2024-39890 An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 13… Exynos Modem 5123 Firmware Mitigation only Fix from $1,9502024-12-02 HIGH 7.0 CVE-2024-39343 An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, Modem 5123, and Mod… Exynos 2100 Firmware Mitigation only Fix from $1,9502024-12-02