Filtered by vendor Samsung Subscriptions
Filtered by product Android Subscriptions
Total 360 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-20959 1 Samsung 1 Android 2025-05-21 5.1 Medium
Use of implicit intent for sensitive communication in Wi-Fi P2P service prior to SMR May-2025 Release 1 allows local attackers to access sensitive information.
CVE-2025-20960 1 Samsung 1 Android 2025-05-21 4 Medium
Improper handling of insufficient permission in CocktailBarService prior to SMR May-2025 Release 1 allows local attackers to use the privileged api.
CVE-2025-20961 1 Samsung 1 Android 2025-05-21 5.5 Medium
Improper handling of insufficient permission or privileges in sepunion service prior to SMR May-2025 Release 1 allows local privileged attackers to access files with system privilege.
CVE-2025-20962 1 Samsung 1 Android 2025-05-21 4 Medium
Improper handling of insufficient permission in SpenGesture service prior to SMR May-2025 Release 1 allows local attackers to track the S Pen position.
CVE-2025-20963 1 Samsung 1 Android 2025-05-21 6.6 Medium
Out-of-bounds write in memory initialization in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2025-20964 1 Samsung 1 Android 2025-05-21 6.6 Medium
Out-of-bounds write in parsing media files in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2024-20813 1 Samsung 1 Android 2025-05-15 8.4 High
Out-of-bounds Write in padmd_vld_qtbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code.
CVE-2024-20812 1 Samsung 1 Android 2025-05-15 8.4 High
Out-of-bounds Write in padmd_vld_htbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code.
CVE-2025-20954 1 Samsung 1 Android 2025-05-13 5.5 Medium
Use of implicit intent for sensitive communication in EnrichedCall prior to SMR May-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.
CVE-2025-20953 1 Samsung 1 Android 2025-05-13 5.1 Medium
Improper access control in SmartManagerCN prior to SMR May-2025 Release 1 allows local attackers to launch activities within SmartManagerCN.
CVE-2025-20937 1 Samsung 1 Android 2025-05-13 6.7 Medium
Out-of-bounds write in Keymaster trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVE-2024-20817 1 Samsung 1 Android 2025-05-08 6.6 Medium
Out-of-bounds Write vulnerabilities in svc1td_vld_slh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.
CVE-2025-20934 1 Samsung 1 Android 2025-04-30 5.5 Medium
Improper access control in Sticker Center prior to SMR Apr-2025 Release 1 allows local attackers to access image files with system privilege.
CVE-2024-20810 1 Samsung 1 Android 2025-04-24 3.3 Low
Implicit intent hijacking vulnerability in Smart Suggestions prior to SMR Feb-2024 Release 1 allows local attackers to get sensitive information.
CVE-2024-20804 1 Samsung 2 Android, Myfiles 2025-04-17 4 Medium
Path traversal vulnerability in FileUriConverter of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrary file.
CVE-2024-20832 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2025-04-16 6.4 Medium
Heap overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows local privileged attackers to execute arbitrary code.
CVE-2025-20886 1 Samsung 1 Android 2025-03-25 4.1 Medium
Inclusion of sensitive information in test code in softsim trustlet prior to SMR Jan-2025 Release 1 allows local privileged attackers to get test key.
CVE-2025-20885 1 Samsung 1 Android 2025-03-25 6.4 Medium
Out-of-bounds write in softsim trustlet prior to SMR Jan-2025 Release 1 allows local privileged attackers to cause memory corruption.
CVE-2023-21421 1 Samsung 1 Android 2025-03-24 5.9 Medium
Improper Handling of Insufficient Permissions or Privileges vulnerability in KnoxCustomManagerService prior to SMR Jan-2023 Release 1 allows attacker to access device SIM PIN.
CVE-2023-21422 1 Samsung 1 Android 2025-03-24 5.7 Medium
Improper authorization vulnerability in semAddPublicDnsAddr in WifiSevice prior to SMR Jan-2023 Release 1 allows attackers to set custom DNS server without permission via binding WifiService.