mobile devices
CVEs (1,006)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-20936 | Hig | 0.57 | 8.8 | 0.00 | Apr 8, 2025 | Improper access control in HDCP trustlet prior to SMR Apr-2025 Release 1 allows local attackers with shell privilege to escalate their privileges to root. | ||
| CVE-2023-21517 | Hig | 0.57 | 8.8 | 0.02 | Jun 28, 2023 | Heap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows remote attacker to execute arbitrary code. | ||
| CVE-2021-22492 | Hig | 0.57 | 8.8 | 0.00 | Jan 5, 2021 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Broadcom Bluetooth chipsets) software. The Bluetooth UART driver has a buffer overflow. The Samsung ID is SVE-2020-18731 (January 2021). | ||
| CVE-2017-18665 | Hig | 0.57 | 8.8 | 0.00 | Apr 7, 2020 | An issue was discovered on Samsung mobile devices with M(6.0) software. There is a NULL pointer exception in WifiService via adb-cmd, causing memory corruption. The Samsung ID is SVE-2017-8287 (June 2017). | ||
| CVE-2022-33719 | Hig | 0.56 | 8.6 | 0.00 | Aug 5, 2022 | Improper input validation in baseband prior to SMR Aug-2022 Release 1 allows attackers to cause integer overflow to heap overflow. | ||
| CVE-2022-23425 | Hig | 0.56 | 8.6 | 0.00 | Feb 11, 2022 | Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with fake base station. | ||
| CVE-2023-21480 | Hig | 0.55 | 8.5 | 0.00 | Sep 3, 2025 | Improper input validation vulnerability in CertByte prior to SMR Apr-2023 Release 1 allows local attackers to launch privileged activities. | ||
| CVE-2024-34620 | Hig | 0.55 | 8.4 | 0.00 | Aug 7, 2024 | Improper privilege management in SumeNNService prior to SMR Aug-2024 Release 1 allows local attackers to start privileged service. | ||
| CVE-2024-20845 | Hig | 0.55 | 8.4 | 0.00 | Apr 2, 2024 | Out-of-bounds write vulnerability while releasing memory in libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code. | ||
| CVE-2024-20844 | Hig | 0.55 | 8.4 | 0.00 | Apr 2, 2024 | Out-of-bounds write vulnerability while parsing remaining codewords in libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code. | ||
| CVE-2024-20813 | Hig | 0.55 | 8.4 | 0.00 | Feb 6, 2024 | Out-of-bounds Write in padmd_vld_qtbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code. | ||
| CVE-2024-20812 | Hig | 0.55 | 8.4 | 0.00 | Feb 6, 2024 | Out-of-bounds Write in padmd_vld_htbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code. | ||
| CVE-2023-42537 | Hig | 0.55 | 8.4 | 0.00 | Nov 7, 2023 | An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write. | ||
| CVE-2023-42536 | Hig | 0.55 | 8.4 | 0.00 | Nov 7, 2023 | An improper input validation in saped_dec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write. | ||
| CVE-2023-42535 | Hig | 0.55 | 8.4 | 0.00 | Nov 7, 2023 | Out-of-bounds Write in read_block of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code. | ||
| CVE-2023-30692 | Hig | 0.55 | 8.5 | 0.00 | Oct 4, 2023 | Improper input validation vulnerability in Evaluator prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities. | ||
| CVE-2023-30690 | Hig | 0.55 | 8.5 | 0.00 | Oct 4, 2023 | Improper input validation vulnerability in Duo prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities. | ||
| CVE-2023-30710 | Hig | 0.55 | 8.5 | 0.00 | Sep 6, 2023 | Improper input validation vulnerability in Knox AI prior to SMR Sep-2023 Release 1 allows local attackers to launch privileged activities. | ||
| CVE-2023-30691 | Hig | 0.55 | 8.4 | 0.00 | Aug 10, 2023 | Parcel mismatch in AuthenticationConfig prior to SMR Aug-2023 Release 1 allows local attacker to privilege escalation. | ||
| CVE-2023-30680 | Hig | 0.55 | 8.4 | 0.00 | Aug 10, 2023 | Improper privilege management vulnerability in MMIGroup prior to SMR Aug-2023 Release 1 allows code execution with privilege. |
- risk 0.57cvss 8.8epss 0.00
Improper access control in HDCP trustlet prior to SMR Apr-2025 Release 1 allows local attackers with shell privilege to escalate their privileges to root.
- risk 0.57cvss 8.8epss 0.02
Heap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows remote attacker to execute arbitrary code.
- risk 0.57cvss 8.8epss 0.00
An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Broadcom Bluetooth chipsets) software. The Bluetooth UART driver has a buffer overflow. The Samsung ID is SVE-2020-18731 (January 2021).
- risk 0.57cvss 8.8epss 0.00
An issue was discovered on Samsung mobile devices with M(6.0) software. There is a NULL pointer exception in WifiService via adb-cmd, causing memory corruption. The Samsung ID is SVE-2017-8287 (June 2017).
- risk 0.56cvss 8.6epss 0.00
Improper input validation in baseband prior to SMR Aug-2022 Release 1 allows attackers to cause integer overflow to heap overflow.
- risk 0.56cvss 8.6epss 0.00
Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with fake base station.
- risk 0.55cvss 8.5epss 0.00
Improper input validation vulnerability in CertByte prior to SMR Apr-2023 Release 1 allows local attackers to launch privileged activities.
- risk 0.55cvss 8.4epss 0.00
Improper privilege management in SumeNNService prior to SMR Aug-2024 Release 1 allows local attackers to start privileged service.
- risk 0.55cvss 8.4epss 0.00
Out-of-bounds write vulnerability while releasing memory in libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code.
- risk 0.55cvss 8.4epss 0.00
Out-of-bounds write vulnerability while parsing remaining codewords in libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code.
- risk 0.55cvss 8.4epss 0.00
Out-of-bounds Write in padmd_vld_qtbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code.
- risk 0.55cvss 8.4epss 0.00
Out-of-bounds Write in padmd_vld_htbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code.
- risk 0.55cvss 8.4epss 0.00
An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.
- risk 0.55cvss 8.4epss 0.00
An improper input validation in saped_dec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.
- risk 0.55cvss 8.4epss 0.00
Out-of-bounds Write in read_block of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code.
- risk 0.55cvss 8.5epss 0.00
Improper input validation vulnerability in Evaluator prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities.
- risk 0.55cvss 8.5epss 0.00
Improper input validation vulnerability in Duo prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities.
- risk 0.55cvss 8.5epss 0.00
Improper input validation vulnerability in Knox AI prior to SMR Sep-2023 Release 1 allows local attackers to launch privileged activities.
- risk 0.55cvss 8.4epss 0.00
Parcel mismatch in AuthenticationConfig prior to SMR Aug-2023 Release 1 allows local attacker to privilege escalation.
- risk 0.55cvss 8.4epss 0.00
Improper privilege management vulnerability in MMIGroup prior to SMR Aug-2023 Release 1 allows code execution with privilege.
Page 5 of 51