Samsung

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Samsung product.

RSS Feeds for Samsung security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Samsung products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Samsung Sorted by Most Security Vulnerabilities since 2018

Samsung Android351 vulnerabilities

Samsung Mobile Devices147 vulnerabilities

Samsung Notes62 vulnerabilities

Samsung Exynos57 vulnerabilities

Samsung Galaxy Store31 vulnerabilities

Samsung Internet28 vulnerabilities

Samsung Account24 vulnerabilities

Samsung Magicinfo 9 Server24 vulnerabilities

Samsung Smartthings20 vulnerabilities

Samsung Pass16 vulnerabilities

Samsung Health15 vulnerabilities

Samsung Email14 vulnerabilities

Samsung Blockchain Keystore12 vulnerabilities

Samsung Rlottie11 vulnerabilities

Samsung Flow10 vulnerabilities

Samsung Pass10 vulnerabilities

Samsung Cloud9 vulnerabilities

Samsung Members9 vulnerabilities

Samsung Email9 vulnerabilities

Samsung Exynos 1330 Firmware8 vulnerabilities

Samsung Gallery8 vulnerabilities

Samsung Blockchain Keystore7 vulnerabilities

Samsung Data Management Server Firmware6 vulnerabilities

Samsung Exynos 1280 Firmware6 vulnerabilities

Samsung Wear Os6 vulnerabilities

Samsung Flow6 vulnerabilities

Samsung Bixby5 vulnerabilities

Samsung Checkout5 vulnerabilities

Samsung Exynos 850 Firmware5 vulnerabilities

Samsung Pay4 vulnerabilities

Samsung Magician4 vulnerabilities

Samsung Update3 vulnerabilities

Samsung Exynos 1380 Firmware3 vulnerabilities

Samsung Nearby Device Scanning2 vulnerabilities

Samsung Easysetup2 vulnerabilities

Samsung Escargot2 vulnerabilities

Samsung Exynos 1080 Firmware2 vulnerabilities

Samsung Exynos 1580 Firmware2 vulnerabilities

Samsung Exynos 2200 Firmware2 vulnerabilities

Samsung Exynos Modem 5300 Firmware2 vulnerabilities

Samsung Galaxy S24 Firmware2 vulnerabilities

Samsung Uphelper Library2 vulnerabilities

Samsung Group Sharing2 vulnerabilities

Samsung Assistant1 vulnerability

Samsung Dex1 vulnerability

Samsung Exynos 1480 Firmware1 vulnerability

Samsung Galaxystore1 vulnerability

Recent Samsung Security Advisories

Advisory	Title	Published
SMR-Oct-2026	Samsung Mobile Security Maintenance Release SMR-Oct-2026	October 6, 2026
SMR-Sep-2026	Samsung Mobile Security Maintenance Release SMR-Sep-2026	September 8, 2026
SMR-Aug-2026	Samsung Mobile Security Maintenance Release SMR-Aug-2026	August 4, 2026
SMR-Jul-2026	Samsung Mobile Security Maintenance Release SMR-Jul-2026	July 7, 2026
SMR-Jun-2026	Samsung Mobile Security Maintenance Release SMR-Jun-2026	June 2, 2026
SMR-May-2026	Samsung Mobile Security Maintenance Release SMR-May-2026	May 6, 2026
SMR-Apr-2026	Samsung Mobile Security Maintenance Release SMR-Apr-2026	April 7, 2026
SMR-Mar-2026	Samsung Mobile Security Maintenance Release SMR-Mar-2026	March 3, 2026
SMR-Feb-2026	Samsung Mobile Security Maintenance Release SMR-Feb-2026	February 3, 2026
SMR-Jan-2026	Samsung Mobile Security Maintenance Release SMR-Jan-2026	January 6, 2026

Known Exploited Samsung Vulnerabilities

The following Samsung vulnerabilities have been marked by CISA as Known to be Exploited by threat actors.

Title	Description	Added
Samsung MagicINFO 9 Server Path Traversal Vulnerability	Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to write arbitrary files as system authority. CVE-2024-7399 Exploit Probability: 91.9%	April 24, 2026
Samsung Mobile Devices Out-of-Bounds Write Vulnerability	Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so. This vulnerability could allow remote attackers to execute arbitrary code. CVE-2025-21042 Exploit Probability: 33.2%	November 10, 2025
Samsung Mobile Devices Out-of-Bounds Write Vulnerability	Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so which allows remote attackers to execute arbitrary code. CVE-2025-21043 Exploit Probability: 2.1%	October 2, 2025
Samsung MagicINFO 9 Server Path Traversal Vulnerability	Samsung MagicINFO 9 Server contains a path traversal vulnerability that allows an attacker to write arbitrary file as system authority. CVE-2025-4632 Exploit Probability: 24.3%	May 22, 2025
Samsung Mobile Devices Use-After-Free Vulnerability	Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution. CVE-2022-22265 Exploit Probability: 0.4%	September 18, 2023
Samsung Mobile Devices Out-of-Bounds Read Vulnerability	Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a buffer in set_skb_priv(), leading to remote code execution by dereference of an invalid function pointer. CVE-2021-25487 Exploit Probability: 0.6%	June 29, 2023
Samsung Mobile Devices Improper Input Validation Vulnerability	Samsung mobile devices contain an improper input validation vulnerability within the modem interface driver that results in a format string bug leading to kernel panic. CVE-2021-25489 Exploit Probability: 0.5%	June 29, 2023
Samsung Mobile Devices Race Condition Vulnerability	Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised. CVE-2021-25394 Exploit Probability: 0.4%	June 29, 2023
Samsung Mobile Devices Race Condition Vulnerability	Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised. CVE-2021-25395 Exploit Probability: 0.4%	June 29, 2023
Samsung Mobile Devices Unspecified Vulnerability	Samsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP. CVE-2021-25371 Exploit Probability: 0.8%	June 29, 2023
Samsung Mobile Devices Improper Boundary Check Vulnerability	Samsung mobile devices contain an improper boundary check vulnerability within DSP driver that allows for out-of-bounds memory access. CVE-2021-25372 Exploit Probability: 0.8%	June 29, 2023
Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability	Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization (ASLR) bypass. CVE-2023-21492 Exploit Probability: 2.6%	May 19, 2023
Samsung Mobile Devices Improper Access Control Vulnerability	Samsung mobile devices contain an improper access control vulnerability in clipboard service which allows untrusted applications to read or write arbitrary files. This vulnerability was chained with CVE-2021-25369 and CVE-2021-25370. CVE-2021-25337 Exploit Probability: 2.8%	November 8, 2022
Samsung Mobile Devices Improper Access Control Vulnerability	Samsung mobile devices using Mali GPU contains an improper access control vulnerability in sec_log file. Exploitation of the vulnerability exposes sensitive kernel information to the userspace. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25370. CVE-2021-25369 Exploit Probability: 1.1%	November 8, 2022
Samsung Mobile Devices Memory Corruption Vulnerability	Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369. CVE-2021-25370 Exploit Probability: 0.9%	November 8, 2022

The vulnerability CVE-2024-7399: Samsung MagicINFO 9 Server Path Traversal Vulnerability is in the top 1% of the currently known exploitable vulnerabilities. 2 known exploited Samsung vulnerabilities are in the top 5% (95th percentile or greater) of the EPSS exploit probability rankings.

By the Year

In 2026 there have been 209 vulnerabilities in Samsung with an average score of 6.0 out of ten. Last year, in 2025 Samsung had 191 security vulnerabilities published. That is, 18 more vulnerabilities have already been reported in 2026 as compared to last year. Last year, the average CVE base score was greater by 0.24

Year	Vulnerabilities	Average Score
2026	209	6.05
2025	191	6.29
2024	230	5.95
2023	236	6.33
2022	147	5.66
2021	73	5.73
2020	10	8.10
2019	7	7.00
2018	20	7.71

It may take a day or so for new Samsung vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Samsung Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-21139	Oct 12, 2026	Samsung Continuity Service Windows Improper Access Control <4.6.1217 Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device.
CVE-2026-21138	Oct 12, 2026	Samsung Smart Switch <3.7.73: No auth check, phys. attacker installs apps Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications.
CVE-2026-21137	Oct 12, 2026	Path Traversal in Samsung Smart Switch <3.7.73 (Android) Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege.
CVE-2026-21136	Oct 12, 2026	Samsung Smart Switch (<3.7.73) Improper Auth: Physical Attacker Invoke Restore Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process.
CVE-2026-21135	Oct 12, 2026	Samsung Internet Access Control Vulnerability pre-30.0.5.6 Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information.	Internet
CVE-2026-21134	Oct 12, 2026	Samsung Flow Improper Auth Adjacent Attack (4.9.22.4) Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information.	Samsung Flow
CVE-2026-21133	Oct 12, 2026	Samsung Flow Path Traversal <4.9.22.1 Allows Clipboard Access Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data.	Samsung Flow
CVE-2026-21132	Oct 12, 2026	Samsung Internet <30.0.5.24: Improper Input Validation Allows Script Injection Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for triggering this vulnerability.	Internet
CVE-2026-21131	Oct 12, 2026	Samsung Flow 4.9.22.4 Local Permission Escalation via Incorrect Default Permission Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device.	Samsung Flow
CVE-2026-21130	Oct 12, 2026	Samsung Checkout CreditCardRetrieveActivity Input Validation flaw before v5.1.03.1 Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges.	Checkout
CVE-2026-21129	Oct 12, 2026	Samsung Checkout <5.1.03.1 Improper Input Validation in GuestCCRegisterActivity Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges.	Checkout
CVE-2026-21128	Oct 12, 2026	Samsung Checkout before 5.1.03.1: CVE-2026-21128 Improper Input Validation Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout privileges.	Checkout
CVE-2026-21127	Oct 12, 2026	Samsung Account Android app components improper export v<15.7.01.1 Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data.	Account
CVE-2026-21126	Oct 12, 2026	Samsung libsimba.heifdec.media.samsung.so OOB Write via Improper Input Validation Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.	Samsung Mobile Devices
CVE-2026-21125	Oct 12, 2026	Samsung Mobile libsimba.heifdec Input Val Flaw (CVE-2026-21125) Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.	Samsung Mobile Devices
CVE-2026-21124	Oct 12, 2026	Samsung Mobile libsimba.heifdec: Improper Input Validation, Local RCE Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.	Samsung Mobile Devices
CVE-2026-21123	Oct 12, 2026	Samsung LockSettings Improper Privilege Management (CVE-2026-21123) Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before first unlock.	Samsung Mobile Devices
CVE-2026-21122	Oct 12, 2026	Samsung TTS libsamsungtts.so OOB Write Enables Local Code Exec Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.	Samsung Mobile Devices
CVE-2026-21121	Oct 12, 2026	CmcCore Improper Permission Handling Enables Local Privilege Escalation Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs.	Samsung Mobile Devices
CVE-2026-21120	Oct 12, 2026	UAFF in Samsung WSM Service: Local Exec via System Priv Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.	Samsung Mobile Devices
CVE-2026-21119	Oct 12, 2026	Samsung lib_sag_ai_sound_sep_v2.00.so OOB read/write (pre-SMR Oct'26) Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory.	Samsung Mobile Devices
CVE-2026-21118	Oct 12, 2026	Android Samsung DownloadProvider Local Access Control Flaw Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage.	Samsung Mobile Devices
CVE-2026-21117	Oct 12, 2026	Improper Access Control in CocktailBarService (Samsung Mobile) Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information.	Samsung Mobile Devices
CVE-2026-21116	Oct 12, 2026	Local OOB Write in libsmkvextractor.so Allows Mem Corrupt on Samsung Mobile Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.	Samsung Mobile Devices
CVE-2026-21115	Oct 12, 2026	Samsung Mobile libcodec2-sec-flacdec.so OOB Write Vulnerability Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.	Samsung Mobile Devices
CVE-2026-21114	Oct 12, 2026	Samsung Mobile libsmkvextractor.so OOB Write Allows Local Code Exec Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.	Samsung Mobile Devices
CVE-2026-21140	Oct 02, 2026	CVE-2026-21140: Samsung ManagedProvision Improper AC Enables Local App Install Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications.	Samsung Mobile Devices
CVE-2026-91826	Sep 15, 2026	Samsung rLottie Stack Overflow Vulnerability in Vector Rendering Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafted vector animations. This issue affects rLottie: 480a2ad0c5d2e45458c545b8213279e9e8b71e39.	Rlottie
CVE-2026-23789	Sep 14, 2026	Samsung Exynos MFC Encoder Driver Double-Free Kernel Vulnerability An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, and W1000. A double-free vulnerability in the Exynos MFC encoder driver (due to improper cleanup of dma_buf references during error handling) leads to kernel memory corruption and potential arbitrary code execution.	Exynos 850 Firmware
CVE-2026-23786	Sep 14, 2026	Exynos DRM HDR Driver TOCTOU Race Causing Heap Overflow Crash An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A TOCTOU race condition in the Exynos DRM HDR Driver leads to a heap overflow, causing a kernel crash.	Exynos 1280 Firmware
CVE-2026-33960	Sep 14, 2026	Exynos WiFi Driver Ioctl OOB Write DoS An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000. . A malformed ioctl command to the Wi-Fi interface device can lead to improper buffer size allocation, resulting in an out-of-bounds write and causing a denial of service (DoS).	Exynos 1330 Firmware
CVE-2026-33962	Sep 14, 2026	Exynos WiFi Netlink OOB Read CVE-2026-33962 An issue was discovered in Wi-Fi in Samsung Mobile Processor Exynos 850, 1280, 1330, 1380, 1480, 2400, W920, and W930. A malformed Netlink command can trigger an out-of-bounds read, potentially leading to information leakage.	Exynos 850 Firmware
CVE-2026-33963	Sep 14, 2026	Exynos Camera Driver Stack Overflow Causes DoS An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. A stack-based buffer overflow occurs when a malformed message is sent to the camera driver, causing a denial of service.	Exynos 1330 Firmware
CVE-2026-33964	Sep 14, 2026	Exynos 1580/2500 Camera Driver Pointer Deref - Info Disclosure/DoS An issue was discovered in camera in Samsung Mobile Processor Exynos 1580 and 2500. An untrusted pointer dereference occurs when a malformed message is sent to the camera driver, causing limited information disclosure or denial of service.	Exynos 1580 Firmware
CVE-2026-23793	Sep 14, 2026	Out-of-Bounds Mem Access in Samsung Exynos GDC Driver An issue was discovered in Samsung Mobile Processor Exynos 1330, 1380, 1480, and 2400. An out-of-bounds memory access vulnerability in the camera GDC driver may lead to kernel memory corruption under certain conditions.	Exynos 1330 Firmware
CVE-2026-33956	Sep 14, 2026	Samsung Exynos Camera Driver OOB Write via Sysfs An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, and 2500. Sending a malformed message to the test_msg sysfs entry causes an out-of-bounds write, leading to denial of service.	Exynos 1330 Firmware
CVE-2026-33957	Sep 14, 2026	Out-of-Bounds Read/Write in CustOS Driver on Samsung Exynos 1580 An issue was discovered in CustOS Driver in Samsung Mobile Processor Exynos 1580. Requesting oversized shared memory from the custos_iwc device enables out-of-bounds read and write, potentially leading to memory corruption or information leakage.	Exynos 1580 Firmware
CVE-2026-23788	Sep 14, 2026	Samsung Exynos DRM HDR Driver Heap Overflow An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, and 1380. A heap overflow in the Exynos DRM HDR driver (due to improper buffer size validation) leads to kernel memory corruption and a system crash.	Exynos 1280 Firmware
CVE-2026-23790	Sep 14, 2026	Samsung Exynos DPU Driver Double-Free Kernel Memory Corruption (CVE-2026-23790) An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A double-free vulnerability in the Samsung Exynos DPU driver (due to improper pointer management during DMA buffer reallocation) leads to kernel memory corruption and a potential use-after-free.	Exynos 1280 Firmware
CVE-2023-37366	Sep 14, 2026	Samsung Exynos: SM Task Loop Exit Condition Improper Handling An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem Exynos 9810, Exynos 9610, Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos Modem 5123, Exynos Modem 5300, an Exynos Auto T5123. In the Shannon SM Task, improper handling of a loop with an unreachable exit condition cannot guarantee the termination of a required service via a malformed SM message.	Exynos 850 Firmware
CVE-2026-33970	Sep 14, 2026	Samsung Exynos 5G Baseband NR RRC null ptr deref CVE-2026-33970 An issue was discovered in NR RRC and L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, W920, W930, W1000, and Modem 5410. In the 5G baseband, a NULL Pointer Dereference occurs when processing a malformed RRC Reconfiguration message.	Exynos 850 Firmware
CVE-2026-33968	Sep 14, 2026	Samsung Exynos Cam Driver TOCTOU OOB An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, a Time-of-Check Time-of-Use (TOCTOU) race condition leads to out-of-bounds access.	Exynos 1330 Firmware
CVE-2026-33967	Sep 14, 2026	Out-of-Bounds Array Access in Samsung Exynos Camera Driver An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, an out-of-bounds array access vulnerability in the error-handling path leads to memory corruption.	Exynos 1330 Firmware
CVE-2026-23787	Sep 14, 2026	Use-After-Free in Samsung Exynos DRM HDR Driver Causes Kernel Crash An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A Use-After-Free in the Exynos DRM HDR driver (due to improper cleanup upon vmap failure) leads to a kernel crash.	Exynos 1280 Firmware
CVE-2026-33966	Sep 14, 2026	Samsung Exynos camera driver sensitive info debug leak An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. An information Leak occurs in the camera driver due to Insertion of Sensitive Information Into Debugging Code.	Exynos 1330 Firmware
CVE-2026-23791	Sep 14, 2026	Samsung Exynos DPU Driver OOB Write Priv Escalation An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. An out-of-bounds write vulnerability in the Exynos DPU driver (due to missing input length validation in color mode LUT parsing) leads to kernel memory corruption and potential privilege escalation.	Exynos 1280 Firmware
CVE-2026-23792	Sep 14, 2026	Samsung Exynos Baseband Crash via NR RRC Unauth Setup An issue was discovered in NR RRC in Samsung Mobile Processor and Modem Exynos 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W1000, Modem 5300, Modem 5400, and Modem 5410. Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash.	Exynos 1080 Firmware
CVE-2024-53922	Sep 13, 2026	Exynos Auto Buffer Queue Driver DoS via Missing Length Check An issue was discovered in the buffer queue driver in Samsung Automotive Processor Exynos Auto 8890, V7, V9, and V920. Lack of a length check leads to a Denial of Service in the kernel.	Exynos
CVE-2026-21113	Sep 09, 2026	Samsung Visual Voicemail <20.1.00.05: Improper Export (Local Call) Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission.	Email
CVE-2026-21112	Sep 09, 2026	Samsung Tips Improper Input Validation Allows Local Activity Launch (Android 17) Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability.