Threat database

Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local attacker to access unique identifier.

Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the installation restriction of specific application.

Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to write arbitrary files as system authority.

CVE-2026-6840 is a medium severity vulnerability in Samsung Open Source ONE prior to version 1.30.0. It involves improper validation of an array index (CWE-129) during model loading, where missing bounds checks on an operator code could allow out-of-range lookups. This vulnerability does not impact confidentiality or integrity but can cause availability issues. No official patch or remediation guidance is currently confirmed. There are no known exploits in the wild, and the product is not a cloud service. Users should monitor vendor advisories for updates on remediation.

CVE-2026-6839 is a medium severity vulnerability in Samsung Open Source ONE prior to version 1.30.0. It involves improper validation of string tensor offsets, which can lead to out-of-bounds access during constant tensor import when malformed string metadata is processed. This vulnerability could impact confidentiality, integrity, and availability to a limited extent. No official patch or remediation guidance is currently provided by the vendor. There are no known exploits in the wild at this time.

Integer overflow in constant tensor data size calculation in Samsung Open Source ONE could cause incorrect buffer sizing for large constant nodes. Affected version is prior to commit 1.30.0.

Integer overflow in tensor copy size calculation in Samsung Open Source ONE could lead to out of bounds access during loop state propagation. Affected version is prior to commit 1.30.0.

Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause incorrect memory initialization for large intermediate tensors. Affected version is prior to commit 1.30.0.

CVE-2026-41664 is an integer overflow vulnerability in Samsung Open Source ONE prior to version 1.30.0. The flaw occurs during memory copy size calculation when handling large tensor shapes, potentially causing invalid memory operations. The vulnerability has a CVSS 3.1 base score of 6.6, indicating medium severity. There is no official patch or remediation level currently confirmed by the vendor. Exploitation requires local access with limited privileges and user interaction. The impact includes limited confidentiality and integrity loss, with a high impact on availability.

Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy length and memory corruption for oversized tensors. Affected version is prior to commit 1.30.0.

Integer overflow in buffer size calculation could result in out of bounds memory access when handling large tensors in Samsung Open Source ONE. Affected version is prior to commit 1.30.0.

Potential Integer overflow in tensor allocation size calculation could lead to insufficient memory allocation for large tensors in Samsung Open Source ONE. Affected version is prior to commit  1.30.0.

CVE-2026-21010 is a vulnerability in Samsung Mobile Devices involving improper input validation in Retail Mode before the SMR April 2026 Release 1. This flaw allows local attackers with limited privileges to trigger privileged functions without user interaction. The vulnerability has a CVSS score of 6.6, indicating a medium severity level. No official patch or remediation guidance has been provided yet, and there are no known exploits in the wild. The vulnerability affects Samsung Mobile Devices generally, with no specific versions detailed. The vendor has not issued an advisory or fix at this time.

CVE-2026-21008 is a medium severity vulnerability affecting Samsung Mobile Devices. It involves exposure of sensitive information in the S Share feature prior to the SMR April 2026 Release 1. The vulnerability allows an adjacent attacker to access sensitive information without requiring privileges or user interaction. No official patch or remediation level has been confirmed yet. The vulnerability has a CVSS 4.0 base score of 5.1, indicating a moderate risk. There are no known exploits in the wild at this time.

CVE-2026-40447 is an integer overflow or wraparound vulnerability in Samsung Open Source Escargot, specifically affecting version 97e8115ab1110bc502b4b5e4a0c689a71520d335. This vulnerability can cause undefined behavior due to improper handling of integer values. The issue has a medium severity rating with a CVSS score of 5.1. There is no known exploit in the wild and no official patch or remediation guidance has been provided yet.

CVE-2026-21014 is an improper access control vulnerability in Samsung Camera versions prior to 16.5.00.28. It allows a local attacker with limited privileges to access location data. Exploitation requires user interaction. The vulnerability has a medium severity rating with a CVSS score of 5.1.

CVE-2026-21013 is a medium severity vulnerability in Samsung Mobile's Galaxy Wearable application prior to version 2.2.68.26. It involves incorrect default permissions that allow local attackers to access sensitive information. The vulnerability has a CVSS 4.0 base score of 6.9, indicating a moderate risk. There is no official patch or remediation level provided in the available data. No known exploits in the wild have been reported.

CVE-2026-21012 is a medium severity vulnerability in Samsung Mobile Devices affecting the AODManager component prior to the SMR April 2026 Release 1. It involves external control of the file name or path, allowing a privileged local attacker to create files with system privileges. The vulnerability requires local privileged access and does not involve user interaction. No official patch or remediation level has been confirmed yet.

CVE-2026-21011 is a medium severity vulnerability in Samsung Mobile Devices involving incorrect privilege assignment in Bluetooth during Maintenance mode. This flaw allows physical attackers to bypass the Extend Unlock security feature. The vulnerability is identified as CWE-266, indicating improper privilege management. It affects devices prior to the SMR April 2026 Release 1. There is no official patch or remediation level provided yet, and no known exploits in the wild have been reported.

CVE-2026-21009 is a medium severity vulnerability in Samsung Mobile Devices involving an improper check for exceptional conditions in the Recents feature prior to the SMR April 2026 Release 1. This flaw allows a physical attacker to bypass the App Pinning security feature. The vulnerability has a CVSS 4.1 score, indicating a moderate risk. No official patch or remediation level has been confirmed yet. There are no known exploits in the wild at this time.