Vulnerabilities (CVE)

Filtered by vendor Samsung Subscribe
Total 1008 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-25496 1 Samsung 1 Notes 2021-10-14 4.6 MEDIUM 7.8 HIGH
A possible buffer overflow vulnerability in maetd_dec_slice of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows arbitrary code execution.
CVE-2021-25497 1 Samsung 1 Notes 2021-10-14 4.6 MEDIUM 7.8 HIGH
A possible buffer overflow vulnerability in maetd_cpy_slice of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows arbitrary code execution.
CVE-2021-25498 1 Samsung 1 Notes 2021-10-14 4.6 MEDIUM 7.8 HIGH
A possible buffer overflow vulnerability in maetd_eco_cb_mode of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows arbitrary code execution.
CVE-2021-25499 1 Samsung 1 Galaxy Store 2021-10-14 2.1 LOW 5.5 MEDIUM
Intent redirection vulnerability in SamsungAccountSDKSigninActivity of Galaxy Store prior to version 4.5.32.4 allows attacker to access content provider of Galaxy Store.
CVE-2021-25494 1 Samsung 1 Notes 2021-10-14 4.6 MEDIUM 7.8 HIGH
A possible buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows arbitrary code execution.
CVE-2021-25469 2 Google, Samsung 2 Android, Exynos 2021-10-13 4.6 MEDIUM 6.7 MEDIUM
A possible stack-based buffer overflow vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows arbitrary code execution.
CVE-2021-25471 2 Google, Samsung 2 Android, Exynos 2021-10-13 5.0 MEDIUM 7.5 HIGH
A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial of service on mobile network connection and battery depletion.
CVE-2021-25479 2 Google, Samsung 2 Android, Exynos 2021-10-13 6.5 MEDIUM 7.2 HIGH
A possible heap-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution.
CVE-2021-25478 2 Google, Samsung 2 Android, Exynos 2021-10-13 6.5 MEDIUM 7.2 HIGH
A possible stack-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution.
CVE-2021-25481 2 Google, Samsung 2 Android, Exynos 2021-10-13 4.6 MEDIUM 6.7 MEDIUM
An improper error handling in Exynos CP booting driver prior to SMR Oct-2021 Release 1 allows local attackers to bypass a Secure Memory Protector of Exynos CP Memory.
CVE-2021-25488 2 Google, Samsung 2 Android, Exynos 2021-10-13 2.1 LOW 5.5 MEDIUM
Lack of boundary checking of a buffer in recv_data() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read.
CVE-2021-25487 2 Google, Samsung 2 Android, Exynos 2021-10-13 4.6 MEDIUM 7.8 HIGH
Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer.
CVE-2021-25491 2 Google, Samsung 2 Android, Exynos 2021-10-13 2.1 LOW 4.4 MEDIUM
A vulnerability in mfc driver prior to SMR Oct-2021 Release 1 allows memory corruption via NULL-pointer dereference.
CVE-2021-25493 1 Samsung 1 Notes 2021-10-13 3.6 LOW 7.1 HIGH
Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows OOB read
CVE-2021-25475 2 Google, Samsung 4 Android, Exynos 2100, Exynos 980 and 1 more 2021-10-13 7.2 HIGH 6.7 MEDIUM
A possible heap-based buffer overflow vulnerability in DSP kernel driver prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution.
CVE-2021-25466 1 Samsung 1 Internet 2021-09-23 5.0 MEDIUM 5.9 MEDIUM
Improper scheme check vulnerability in Samsung Internet prior to version 15.0.2.47 allows attackers to perform Man-in-the-middle attack and obtain Samsung Account token.
CVE-2021-25452 2 Google, Samsung 4 Android, Exynos 2100, Exynos 980 and 1 more 2021-09-23 4.9 MEDIUM 5.5 MEDIUM
An improper input validation vulnerability in loading graph file in DSP driver prior to SMR Sep-2021 Release 1 allows attackers to perform permanent denial of service on the device.
CVE-2021-25465 1 Samsung 1 Themes 2021-09-22 4.4 MEDIUM 7.0 HIGH
An improper scheme check vulnerability in Samsung Themes prior to version 5.2.01 allows attackers to perform Man-in-the-middle attack.
CVE-2021-25457 2 Google, Samsung 4 Android, Exynos 2100, Exynos 980 and 1 more 2021-09-22 2.1 LOW 3.3 LOW
An improper input validation vulnerability in DSP driver prior to SMR Sep-2021 Release 1 allows local attackers to get a limited kernel memory information.
CVE-2021-25407 2 Google, Samsung 5 Android, Exynos 2100, Exynos 980 and 2 more 2021-09-21 4.6 MEDIUM 7.8 HIGH
A possible out of bounds write vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write.