SB20260202109 - Multiple vulnerabilities in Samsung products

Main Vulnerability Database SB20260202109

SB20260202109 - Multiple vulnerabilities in Samsung products

Published: February 2, 2026

Security Bulletin ID SB20260202109

Severity

Medium

Patch available

YES

Number of vulnerabilities 10

Exploitation vector Remote access

Highest impact Denial of service

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 10 secuirty vulnerabilities.

1) Uncontrolled Memory Allocation (CVE-ID: CVE-2025-58340)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to uncontrolled memory allocation in /proc/driver/unifi0/send_delts write operation. A remote attacker can cause a denial of service (DoS) condition on the target system.

2) Input validation error (CVE-ID: CVE-2025-59439)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to incorrect handling of NAS Registration messages. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.

3) Uncontrolled Memory Allocation (CVE-ID: CVE-2025-58348)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to uncontrolled memory allocation in /proc/driver/unifi0/confg_tspec write operation. A remote attacker can cause a denial of service (DoS) condition on the target system.

4) Uncontrolled Memory Allocation (CVE-ID: CVE-2025-58346)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to uncontrolled memory allocation in /proc/driver/unifi0/send_addts write operation. A remote attacker can cause a denial of service (DoS) condition on the target system.

5) Uncontrolled Memory Allocation (CVE-ID: CVE-2025-58345)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to uncontrolled memory allocation in /proc/driver/unifi0/ap_certif_11ax_mode write operation. A remote attacker can cause a denial of service (DoS) condition on the target system.

6) Uncontrolled Memory Allocation (CVE-ID: CVE-2025-58344)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to uncontrolled memory allocation in /proc/driver/unifi0/conn_log_event_burst_to_us write operation. A remote attacker can cause a denial of service (DoS) condition on the target system.

7) Uncontrolled Memory Allocation (CVE-ID: CVE-2025-58343)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to uncontrolled memory allocation in /proc/driver/unifi0/create_tspec write operation. A remote attacker can cause a denial of service (DoS) condition on the target system.

8) Uncontrolled Memory Allocation (CVE-ID: CVE-2025-58342)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to uncontrolled memory allocation in /proc/driver/unifi0/uapsd write operation. A remote attacker can cause a denial of service (DoS) condition on the target system.

9) Uncontrolled Memory Allocation (CVE-ID: CVE-2025-58341)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to uncontrolled memory allocation in /proc/driver/unifi0/ap_cert_disable_ht_vht write operation. A remote attacker can cause a denial of service (DoS) condition on the target system.

10) Uncontrolled Memory Allocation (CVE-ID: CVE-2025-58347)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to uncontrolled memory allocation in /proc/driver/unifi0/p2p_certif write operation. A remote attacker can cause a denial of service (DoS) condition on the target system.

Remediation

Install update from vendor's website.

References