Samsung Mobile Devices

Samsung libsimba.heifdec.media.samsung.so OOB Write via Improper Input Validation
CVE-2026-21126 6.9 - Medium - October 12, 2026

Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.

Samsung Mobile libsimba.heifdec Input Val Flaw (CVE-2026-21125)
CVE-2026-21125 8.6 - High - October 12, 2026

Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.

Improper Input Validation

Samsung Mobile libsimba.heifdec: Improper Input Validation, Local RCE
CVE-2026-21124 8.6 - High - October 12, 2026

Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.

Improper Input Validation

Samsung LockSettings Improper Privilege Management (CVE-2026-21123)
CVE-2026-21123 6.7 - Medium - October 12, 2026

Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before first unlock.

Improper Privilege Management

Samsung TTS libsamsungtts.so OOB Write Enables Local Code Exec
CVE-2026-21122 7 - High - October 12, 2026

Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.

Memory Corruption

CmcCore Improper Permission Handling Enables Local Privilege Escalation
CVE-2026-21121 6.9 - Medium - October 12, 2026

Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs.

Improper Handling of Insufficient Permissions or Privileges

UAFF in Samsung WSM Service: Local Exec via System Priv
CVE-2026-21120 8.9 - High - October 12, 2026

Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.

Dangling pointer

Samsung lib_sag_ai_sound_sep_v2.00.so OOB read/write (pre-SMR Oct'26)
CVE-2026-21119 4.8 - Medium - October 12, 2026

Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory.

Android Samsung DownloadProvider Local Access Control Flaw
CVE-2026-21118 6.9 - Medium - October 12, 2026

Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage.

Authorization

Improper Access Control in CocktailBarService (Samsung Mobile)
CVE-2026-21117 5.1 - Medium - October 12, 2026

Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information.

Authorization

Local OOB Write in libsmkvextractor.so Allows Mem Corrupt on Samsung Mobile
CVE-2026-21116 5.1 - Medium - October 12, 2026

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.

Memory Corruption

Samsung Mobile libcodec2-sec-flacdec.so OOB Write Vulnerability
CVE-2026-21115 5.1 - Medium - October 12, 2026

Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.

Memory Corruption

Samsung Mobile libsmkvextractor.so OOB Write Allows Local Code Exec
CVE-2026-21114 7 - High - October 12, 2026

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.

Memory Corruption

CVE-2026-21140: Samsung ManagedProvision Improper AC Enables Local App Install
CVE-2026-21140 6.9 - Medium - October 02, 2026

Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications.

Heap Buffer Overflow in Samsung KnoxVault Trustlet (CVE-2026-21104)
CVE-2026-21104 7.1 - High - September 09, 2026

Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code.

Heap-based Buffer Overflow

GalaxyDiagnostics Path Traversal Allows Physical Attackers to Read System Files
CVE-2026-21103 6.8 - Medium - September 09, 2026

Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.

Path Traversal: '.../...//'

DualDAR UAF Allows Root Code Exec on Samsung Mobile
CVE-2026-21102 9.3 - Critical - September 09, 2026

Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.

Dangling pointer

DualDAR driver input validation flaw allows local privilege escalation
CVE-2026-21101 8.4 - High - September 09, 2026

Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege.

Improper Input Validation

Samsung SystemUI Improper Access Control: Local Attacker Arbitrary Activity
CVE-2026-21100 6.9 - Medium - September 09, 2026

Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity.

Authorization

Samsung SettingsProvider Improper Access Control (CVE-2026-21099)
CVE-2026-21099 5.1 - Medium - September 09, 2026

Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information.

Improper Handling of Insufficient Permissions or Privileges

CVE-2026-21098: Improper Access Control in Samsung Link to Windows
CVE-2026-21098 6.9 - Medium - September 09, 2026

Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction.

Authorization

Android Local Privilege Escalation via ActivityTaskManagerService
CVE-2026-21097 4.6 - Medium - September 09, 2026

Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity.

AuthZ

Heap Overflow in Samsung libimagecodec JPEG Decoder Enables RCE
CVE-2026-21096 9.2 - Critical - September 09, 2026

Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.

Heap-based Buffer Overflow

Heap Buffer Overflow in libimagecodec.quram.so DNG Decoder (Samsung Android)
CVE-2026-21095 9.2 - Critical - September 09, 2026

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.

Heap-based Buffer Overflow

wpa_supplicant OOB Write via Improper Input Validation
CVE-2026-21094 6.1 - Medium - September 09, 2026

Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory.

Improper Input Validation

PROCA trustlet: Stack buffer overflow allows local privilege escalation on Samsung Mobile
CVE-2026-21093 5.6 - Medium - September 09, 2026

Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.

Stack Overflow

Android ImsService Path Traversal Enables System-Privileged Image Creation
CVE-2026-21092 8.8 - High - September 09, 2026

Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege.

Path Traversal: '.../...//'

Samsung Mobile libcodec2secevrcdec.so OOB Write (CVE-2026-21091)
CVE-2026-21091 4.4 - Medium - September 09, 2026

Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.

Memory Corruption

Samsung libsaviextractor.so OOB write allows local memory corruption
CVE-2026-21090 4.4 - Medium - September 09, 2026

Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.

Memory Corruption

Samsung Mobile libsubextractor SO OOB Write via Input Validation Flaw
CVE-2026-21089 6.9 - Medium - September 09, 2026

Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.

Improper Input Validation

Improper Input Validation in libsubextractor.so OOB Write
CVE-2026-21088 6.9 - Medium - September 09, 2026

Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.

Improper Input Validation

Samsung Android libmdnie.so OOB Write Enables System Privilege Escalation
CVE-2026-21087 8.6 - High - September 09, 2026

Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege.

Memory Corruption

Samsung Mobile ProxyHandler Local Access Unauthorized Access CVE-2026-21086
CVE-2026-21086 4.8 - Medium - September 09, 2026

Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to access proxy configuration.

Improper Input Validation

Keymaster Trustlet OOB Write (CVE-2026-21085) Samsung Android
CVE-2026-21085 8.4 - High - September 09, 2026

Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.

Memory Corruption

Samsung Galaxy Themes Improper Input Validation Leads to Arbitrary Activity
CVE-2026-21073 5.2 - Medium - August 10, 2026

Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity.

Samsung libsavsvc VC1 Codec OOB Write via Improper Input Validation
CVE-2026-21072 5.1 - Medium - August 10, 2026

Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

Improper Input Validation

Samsung Mobile libsavsvc.so MPEG4 Codec OOB Write Vulnerability
CVE-2026-21071 5.1 - Medium - August 10, 2026

Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

Improper Input Validation

Improper Input Validation in Samsung Message Enables Physical Attack
CVE-2026-21070 5.1 - Medium - August 10, 2026

Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information.

Improper Input Validation

Samsung Mobile libsavsvc.so VC1 OOB Write via Numeric Conversion
CVE-2026-21069 5.1 - Medium - August 10, 2026

Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

Incorrect Conversion between Numeric Types

Stack-overflow in libril_sem.so (Android RIL) allows local code exec
CVE-2026-21068 8.4 - High - August 10, 2026

Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code.

Stack Overflow

Samsung libsmsd.so OOB Write via Improper Input Validation
CVE-2026-21067 5.1 - Medium - August 10, 2026

Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

Samsung Mobile libcodec2_sec_flacdec.so OOB Write via Improper Input Validation
CVE-2026-21066 5.1 - Medium - August 10, 2026

Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

Improper Input Validation

Samsung Mobile libcodec2secqcelpdec.so OOB Write (CVE-2026-21065)
CVE-2026-21065 4.4 - Medium - August 10, 2026

Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

Improper Input Validation

Local Improper Access Control in Samsung Weaver Causing Inoperability
CVE-2026-21064 7 - High - August 10, 2026

Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability.

Authorization

Android AppLock Improper Export Enables Physical Bypass
CVE-2026-21063 6.8 - Medium - August 10, 2026

Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function.

Improper Export of Android Application Components

Auth Bypass in SemClipboardService: Local Clipboard Data Access
CVE-2026-21062 4.8 - Medium - August 10, 2026

Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.

Improper Authorization in Handler for Custom URL Scheme

Samsung Dialer Improper Input Validation Enables Remote SIM Access
CVE-2026-21061 6 - Medium - August 10, 2026

Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction is required for triggering this vulnerability.

Improper Input Validation

Samsung Contacts Input Validation Flaw Enables Physical Attack, Cross-Profile Data Access
CVE-2026-21060 6.7 - Medium - August 10, 2026

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles.

Improper Input Validation

Samsung Contacts: Improper export enables local file delete (CVE-2026-21059)
CVE-2026-21059 6.9 - Medium - August 10, 2026

Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.

Improper Export of Android Application Components

Samsung Contacts Improper Input Validation Allows Local File Deletion
CVE-2026-21058 6.9 - Medium - August 10, 2026

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.

Improper Input Validation