Vulnerabilities > Samsung > Android > High

DATE CVE VULNERABILITY TITLE RISK
2025-05-07 CVE-2025-20957 Unspecified vulnerability in Samsung Android 13.0/14.0
Improper access control in SmartManagerCN prior to SMR May-2025 Release 1 allows local attackers to launch arbitrary activities with SmartManagerCN privilege.
local
low complexity
samsung
7.8
2025-05-07 CVE-2025-20963 Out-of-bounds Write vulnerability in Samsung Android 13.0/14.0
Out-of-bounds write in memory initialization in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory.
local
low complexity
samsung CWE-787
7.8
2025-05-07 CVE-2025-20964 Out-of-bounds Write vulnerability in Samsung Android 13.0/14.0
Out-of-bounds write in parsing media files in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory.
local
low complexity
samsung CWE-787
7.8
2025-02-04 CVE-2025-20881 Out-of-bounds Write vulnerability in Samsung Android 12.0/13.0/14.0
Out-of-bounds write in accessing buffer storing the decoded video frames in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege.
local
low complexity
samsung CWE-787
7.8
2025-02-04 CVE-2025-20882 Out-of-bounds Write vulnerability in Samsung Android 12.0/13.0/14.0
Out-of-bounds write in accessing uninitialized memory for svc1td in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege.
local
low complexity
samsung CWE-787
7.8
2025-02-04 CVE-2025-20888 Out-of-bounds Write vulnerability in Samsung Android 12.0/13.0/14.0
Out-of-bounds write in handling the block size for smp4vtd in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege.
local
low complexity
samsung CWE-787
7.8
2025-02-04 CVE-2025-20890 Out-of-bounds Write vulnerability in Samsung Android 12.0/13.0/14.0
Out-of-bounds write in decoding frame buffer in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege.
local
low complexity
samsung CWE-787
7.8
2024-12-03 CVE-2024-49410 Out-of-bounds Write vulnerability in Samsung Android 12.0/13.0
Out-of-bounds write in libswmfextractor.so prior to SMR Dec-2024 Release 1 allows local attackers to execute arbitrary code.
local
low complexity
samsung CWE-787
7.8
2024-12-03 CVE-2024-49413 Improper Verification of Cryptographic Signature vulnerability in Samsung Android 13.0/14.0
Improper Verification of Cryptographic Signature in SmartSwitch prior to SMR Dec-2024 Release 1 allows local attackers to install malicious applications.
local
low complexity
samsung CWE-347
7.8
2024-11-06 CVE-2024-34676 Out-of-bounds Write vulnerability in Samsung Android 12.0/13.0/14.0
Out-of-bounds write in parsing subtitle file in libsubextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption.
local
low complexity
samsung CWE-787
7.3