Threat database

Out-of-bounds read in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.

EPSS 0.3%VulnerabilitySamsung Mobile#cwe-125Germany+7

Out-of-bounds write in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.

EPSS 0.3%VulnerabilitySamsung Mobile#cwe-787Germany+7

Out-of-bounds write in parsing IFD tag in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.

EPSS 0.3%VulnerabilitySamsung Mobile#cwe-787Germany+6

Out-of-bounds read vulnerability in bootloader prior to SMR Dec-2025 Release 1 allows physical attackers to access out-of-bounds memory.

EPSS 0.1%VulnerabilitySamsung Mobile#cwe-125Germany+6

Improper input validation in libsec-ril.so prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.

EPSS 0.1%VulnerabilitySamsung Mobile#cwe-20Germany+6

Improper export of android application components in Dynamic Lockscreen prior to SMR Dec-2025 Release 1 allows local attackers to access files with Dynamic Lockscreen's privilege.

EPSS 0.1%VulnerabilitySamsung Mobile#cwe-926Germany+7

Out-of-bounds write in decoding metadata in fingerprint trustlet prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.

EPSS 0.1%VulnerabilitySamsung Mobile#cwe-787United States+13

CVE-2025-21079 is a high-severity vulnerability in Samsung Members prior to version 5.5.01.3 caused by improper input validation. This flaw allows remote attackers to connect to arbitrary URLs and launch arbitrary activities with Samsung Members privileges, but requires user interaction to trigger. There is no confirmed patch or official fix information available at this time. The vulnerability does not impact confidentiality but can affect integrity and availability. No known exploits in the wild have been reported. Users of affected versions should monitor vendor advisories for remediation updates.

Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications.

EPSS 0.2%VulnerabilitySamsung Mobile#cwe-330South Korea+9

Improper input validation in Samsung Email prior to version 6.2.06.0 allows local attackers to launch arbitrary activity with Samsung Email privilege.

EPSS 0.1%VulnerabilitySamsung Mobile#cwe-20Germany+7

Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows local attackers to access data in Samsung Account. User interaction is required for triggering this vulnerability.

EPSS 0.1%VulnerabilitySamsung Mobile#cwe-280Germany+6

Out-of-bounds write in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory.

EPSS 0.3%VulnerabilitySamsung Mobile#cwe-787Germany+7

Out-of-bounds read in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory.

EPSS 0.3%VulnerabilitySamsung Mobile#cwe-125Germany+6

Insecure default configuration in USB connection mode prior to SMR Nov-2025 Release 1 allows privileged physical attackers to access user data. User interaction is required for triggering this vulnerability.

EPSS 0.2%VulnerabilitySamsung Mobile#cwe-1188Germany+6

Out-of-bounds write in handling opcode in fingerprint trustlet prior to SMR Nov-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.

EPSS 0.1%VulnerabilitySamsung Mobile#cwe-787United States+9

Improper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local attackers to access data across multiple user profiles.

EPSS 0.1%VulnerabilitySamsung Mobile#cwe-20Germany+6

Out-of-bounds write in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to write out-of-bounds memory.

EPSS 0.1%VulnerabilitySamsung Mobile#cwe-787Germany+6

Out-of-bounds read in the parsing of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.

EPSS 0.1%VulnerabilitySamsung Mobile#cwe-125Germany+7

Out-of-bounds read in the reading of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.

EPSS 0.1%VulnerabilitySamsung Mobile#cwe-125Germany+6

Out-of-bounds read in the allocation of image buffer in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.

EPSS 0.1%VulnerabilitySamsung Mobile#cwe-125Germany+7