Samsung Mobile vulnerabilities

CVEs per yearBy the year they were published

1. 2021197
2. 2022356
3. 2023237
4. 2024221
5. 2025234
6. 2026174

Known exploitedNewest addition to KEV first

• CVE-2025-21042

  Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.

  Samsung Mobile · Samsung Mobile Devices

  ExploitedHigh8.8
• CVE-2025-21043

  Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.

  Samsung Mobile · Samsung Mobile Devices

  ExploitedHigh8.8
• CVE-2022-22265

  An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.

  Samsung Mobile · Samsung Mobile Devices

  ExploitedMedium5.0
• CVE-2021-25489

  Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to…

  Samsung Mobile · Samsung Mobile Devices

  ExploitedLow3.3
• CVE-2021-25487

  Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary…

  Samsung Mobile · Samsung Mobile Devices

  ExploitedHigh7.3
• CVE-2021-25394

  A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is…

  Samsung Mobile · Samsung Mobile Devices

  ExploitedMedium6.4
• CVE-2021-25395

  A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.

  Samsung Mobile · Samsung Mobile Devices

  ExploitedMedium6.4
• CVE-2021-25372

  An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.

  Samsung Mobile · Samsung Mobile Devices

  ExploitedMedium6.1
• CVE-2021-25371

  A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.

  Samsung Mobile · Samsung Mobile Devices

  ExploitedMedium6.1
• CVE-2023-21492

  Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.

  Samsung Mobile · Samsung Mobile Devices

  ExploitedMedium4.4

Newest CVEs

• CVE-2026-21157

  Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity.

  Samsung Mobile · Bixby

  High8.3
• CVE-2026-21139

  Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile…

  Samsung Mobile · Samsung Continuity Service for windows

  High7.3
• CVE-2026-21138

  Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications.

  Samsung Mobile · Smart Switch

  Medium6.9
• CVE-2026-21137

  Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege.

  Samsung Mobile · Smart Switch

  Medium5.1
• CVE-2026-21136

  Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process.

  Samsung Mobile · Smart Switch

  Medium6.8
• CVE-2026-21135

  Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information.

  Samsung Mobile · Samsung Internet

  Medium5.9
• CVE-2026-21134

  Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information.

  Samsung Mobile · Samsung Flow

  Medium6.1
• CVE-2026-21133

  Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data.

  Samsung Mobile · Samsung Flow

  Medium5.1
• CVE-2026-21132

  Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for…

  Samsung Mobile · Samsung Internet

  Medium6.0
• CVE-2026-21131

  Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on…

  Samsung Mobile · Samsung Flow

  Low2.1