Threat database

Path traversal in Wallpaper service prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system server privilege.

Out-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows remote attackers to execute arbitrary code.

Improper access control in SamsungSEAgentService prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information.

Improper access control in IAFDService prior to SMR Jul-2026 Release 1 allows local privileged attackers to use the privileged APIs.

Improper access control in Settings prior to SMR Jul-2026 Release 1 allows local attackers to configure Theft protection settings.

CVE-2026-21038 is a medium severity vulnerability in the Samsung Android USB Driver for Windows. It involves improper input validation that allows a local attacker to access out-of-bounds memory. This affects versions prior to 1.9.5.0 of the driver. No official patch or remediation level has been confirmed yet.

CVE-2026-21037 is a medium severity vulnerability in Samsung Members prior to version 5.8.01.5. It involves improper input validation that allows local attackers to access arbitrary URLs and launch arbitrary activities with Samsung Members privileges.

CVE-2026-21036 is an improper authorization vulnerability in Samsung Internet browser versions prior to 30.0.0.39. This flaw allows local attackers to access sensitive information without proper authorization. The vulnerability has a medium severity rating with a CVSS 4.0 score of 6.3. No official patch or remediation guidance has been provided yet by the vendor. There are no known exploits in the wild at this time.

CVE-2026-21035 is an improper input validation vulnerability in Samsung Plus TV versions prior to 1.0.28.6. This flaw allows remote attackers to access sensitive information. The vulnerability has a medium severity rating with a CVSS 4.0 base score of 6.5. No official patch or remediation guidance has been provided yet by the vendor.

CVE-2026-21034 is a medium severity vulnerability in Samsung Auto affecting versions prior to 3.1.2.61 on Android 15 and prior to 3.2.0.38 on Android 16. It involves improper export of Android application components, which allows a local attacker with limited privileges to change audio configuration settings. There is no official patch or remediation level stated in the available data.

Improper export of android application components in ExpressHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script.

Improper export of android application components in SmartHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script.

Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. User interaction is required for triggering this vulnerability.

Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger privileged functions.

Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 allows local attacker to execute privileged operations.

Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.

Improper export of android application components in ImsSettings prior to SMR Jun-2026 Release 1 allows local attackers to trigger logging function.

Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attackers to access to sensitive information.

Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.

Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attackers to access privileged files.