Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Samsung Mobile vulnerabilities

1,419 published CVEs name Samsung Mobile among the affected products; CISA lists 13 of them as exploited in the wild.

Atom feed of new CVEs

Known exploited

Newest addition to KEV first.

  • CVE-2025-21042

    Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.

    Samsung Mobile · Samsung Mobile Devices

    ExploitedHigh8.8
  • CVE-2025-21043

    Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.

    Samsung Mobile · Samsung Mobile Devices

    ExploitedHigh8.8
  • CVE-2022-22265

    An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.

    Samsung Mobile · Samsung Mobile Devices

    ExploitedMedium5.0
  • CVE-2021-25489

    Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to…

    Samsung Mobile · Samsung Mobile Devices

    ExploitedLow3.3
  • CVE-2021-25487

    Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary…

    Samsung Mobile · Samsung Mobile Devices

    ExploitedHigh7.3
  • CVE-2021-25394

    A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is…

    Samsung Mobile · Samsung Mobile Devices

    ExploitedMedium6.4
  • CVE-2021-25395

    A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.

    Samsung Mobile · Samsung Mobile Devices

    ExploitedMedium6.4
  • CVE-2021-25372

    An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.

    Samsung Mobile · Samsung Mobile Devices

    ExploitedMedium6.1
  • CVE-2021-25371

    A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.

    Samsung Mobile · Samsung Mobile Devices

    ExploitedMedium6.1
  • CVE-2023-21492

    Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.

    Samsung Mobile · Samsung Mobile Devices

    ExploitedMedium4.4
All 1,419 in the list