Threat database

279 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	4.0	EPSS 0.1%	CVE-2025-20993Samsung Mobile Devices · Heap-based Buffer Overflow Medium4.0EPSS 0.1%2025-06-04CVE Database V5CVE-2025-20993 Out-of-bounds write in libsecimaging.camera.samsung.so prior to SMR Jun-2025 Release 1 allows local attackers to write out-of-bounds memory. EPSS 0.1%Vulnerability Samsung Mobile #cwe-122 Germany+7	CVE Database V5	2025-06-04
Medium	4.0	EPSS 0.2%	CVE-2025-20992Samsung Mobile Devices · Heap-based Buffer Overflow Medium4.0EPSS 0.2%2025-06-04CVE Database V5CVE-2025-20992 Out-of-bound read in libsecimaging.camera.samsung.so prior to SMR Feb-2025 Release 1 allows local attackers to read out-of-bounds memory. EPSS 0.2%Vulnerability Samsung Mobile #cwe-122 Germany+7	CVE Database V5	2025-06-04
Medium	4.0	EPSS 0.1%	CVE-2025-20991Samsung Mobile Devices · Improper Export of Android Application Components Medium4.0EPSS 0.1%2025-06-04CVE Database V5CVE-2025-20991 Improper export of Android application components in Bluetooth prior to SMR Jun-2025 Release 1 allows local attackers to make devices discoverable. EPSS 0.1%Vulnerability Samsung Mobile #cwe-926 Germany+9	CVE Database V5	2025-06-04
Medium	5.2	EPSS 0.1%	CVE-2025-20989Samsung Mobile Devices · Exposure of Sensitive Information to an Unauthorized Actor Medium5.2EPSS 0.1%2025-06-04CVE Database V5CVE-2025-20989 Improper logging in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a hmac_key. EPSS 0.1%Vulnerability Samsung Mobile #cwe-200 Germany+7	CVE Database V5	2025-06-04
Medium	5.5	EPSS 0.2%	CVE-2025-20988Samsung Mobile Devices · Out-of-bounds Read Medium5.5EPSS 0.2%2025-06-04CVE Database V5CVE-2025-20988 Out-of-bounds read in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to read out-of-bounds memory. EPSS 0.2%Vulnerability Samsung Mobile #cwe-125 Germany+7	CVE Database V5	2025-06-04
Medium	5.2	EPSS 0.1%	CVE-2025-20987Samsung Mobile Devices · Exposure of Sensitive Information to an Unauthorized Actor Medium5.2EPSS 0.1%2025-06-04CVE Database V5CVE-2025-20987 Improper access control in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a auth_token. EPSS 0.1%Vulnerability Samsung Mobile #cwe-200 Germany+9	CVE Database V5	2025-06-04
Medium	5.5	EPSS 0.1%	CVE-2025-20986Samsung Mobile Devices · Improper Access Control Medium5.5EPSS 0.1%2025-06-04CVE Database V5CVE-2025-20986 Improper access control in ScreenCapture for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to take screenshots. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+6	CVE Database V5	2025-06-04
Medium	5.5	EPSS 0.1%	CVE-2025-20985Samsung Mobile Devices · Improper Privilege Management Medium5.5EPSS 0.1%2025-06-04CVE Database V5CVE-2025-20985 Improper privilege management in ThemeManager prior to SMR Jun-2025 Release 1 allows local privileged attackers to reuse trial items. EPSS 0.1%Vulnerability Samsung Mobile #cwe-269 Germany+7	CVE Database V5	2025-06-04
Medium	6.8	EPSS 0.1%	CVE-2025-20984Samsung Mobile Devices · Incorrect Default Permissions Medium6.8EPSS 0.1%2025-06-04CVE Database V5CVE-2025-20984 Incorrect default permission in Samsung Cloud for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to access data in Samsung Cloud for Galaxy Watch. EPSS 0.1%Vulnerability Samsung Mobile #cwe-276 Germany+7	CVE Database V5	2025-06-04
Medium	6.2	EPSS 0.1%	CVE-2025-20981Samsung Mobile Devices · Improper Access Control Medium6.2EPSS 0.1%2025-06-04CVE Database V5CVE-2025-20981 Improper access control in AudioService prior to SMR Jun-2025 Release 1 allows local attackers to access sensitive information. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-06-04
High	8.8	EPSS 0.3%	CVE-2025-20946Samsung Mobile Devices · Improper Privilege Management High8.8EPSS 0.3%2025-04-08CVE Database V5CVE-2025-20946 Improper handling of exceptional conditions in pairing specific bluetooth devices in Galaxy Watch Bluetooth pairing prior to SMR Apr-2025 Release 1 allows local attackers to pair with specific bluetooth devices without user interaction. EPSS 0.3%Vulnerability Samsung Mobile #cwe-269 United States+9	CVE Database V5	2025-04-08
High	8.8	EPSS 0.2%	CVE-2025-20936Samsung Mobile Devices · Improper Authorization High8.8EPSS 0.2%2025-04-08CVE Database V5CVE-2025-20936 Improper access control in HDCP trustlet prior to SMR Apr-2025 Release 1 allows local attackers with shell privilege to escalate their privileges to root. EPSS 0.2%Vulnerability Samsung Mobile #cwe-285 United States+13	CVE Database V5	2025-04-08
High	7.3	EPSS 0.2%	CVE-2025-20931Samsung Notes · Heap-based Buffer Overflow High7.3EPSS 0.2%2025-03-06CVE Database V5CVE-2025-20931 Out-of-bounds write in parsing bmp image in Samsung Notes prior to version 4.4.26.71 allows local attackers to execute arbitrary code. EPSS 0.2%Vulnerability Samsung Mobile #cwe-122 United States+9	CVE Database V5	2025-03-06
High	7.3	EPSS 0.2%	CVE-2025-20929Samsung Notes · Heap-based Buffer Overflow High7.3EPSS 0.2%2025-03-06CVE Database V5CVE-2025-20929 Out-of-bounds write in parsing jpeg image in Samsung Notes prior to version 4.4.26.71 allows local attackers to execute arbitrary code. EPSS 0.2%Vulnerability Samsung Mobile #cwe-122 United States+9	CVE Database V5	2025-03-06
High	7.3	EPSS 0.2%	CVE-2025-20903Samsung Mobile Devices · Improper Access Control High7.3EPSS 0.2%2025-03-06CVE Database V5CVE-2025-20903 Improper access control in SecSettingsIntelligence prior to SMR Mar-2025 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability. EPSS 0.2%Vulnerability Samsung Mobile #cwe-284 United States+11	CVE Database V5	2025-03-06
Low	3.3	EPSS 0.2%	CVE-2024-20805Samsung Mobile Devices · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Low3.3EPSS 0.2%2024-01-04CVE Database V5CVE-2024-20805 Path traversal vulnerability in ZipCompressor of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrary file. EPSS 0.2%Vulnerability Samsung Mobile #cwe-22 Germany+9	CVE Database V5	2024-01-04
Medium	5.4	EPSS 0.4%	CVE-2023-42576Samsung Pass · Improper Authentication Medium5.4EPSS 0.4%2023-12-05CVE Database V5CVE-2023-42576 Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid exception handler. EPSS 0.4%Vulnerability Samsung Mobile #cwe-287 Germany+7	CVE Database V5	2023-12-05
High	7.1	EPSS 0.4%	CVE-2023-42561Samsung Mobile Devices · Out-of-bounds Write High7.1EPSS 0.4%2023-12-05CVE Database V5CVE-2023-42561 Heap out-of-bounds write vulnerability in bootloader prior to SMR Dec-2023 Release 1 allows a physical attacker to execute arbitrary code. EPSS 0.4%Vulnerability Samsung Mobile #cwe-787 Germany+9	CVE Database V5	2023-12-05
Medium	4.4	KEVEPSS 2.6%	CVE-2023-21492Samsung Mobile Devices · Insertion of Sensitive Information into Log File Medium4.4KEVEPSS 2.6%2023-05-04CVE Database V5CVE-2023-21492 Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR. KEVEPSS 2.6%Vulnerability Samsung Mobile #cwe-532 Germany+6	CVE Database V5	2023-05-04

Showing 261–279 of 279 results