Known vulnerabilities in Samsung Mobile Firmware

Vendor: Samsung
Software: Samsung Mobile Firmware
Software CPE: cpe:2.3:a:samsung:samsung_mobile_firmware:*:*:*:*:*:*:*:*
Website: https://www.samsung.com/
Total vulnerabilities: 436
Public exploits: 13
Known exploited (KEV): 21
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Samsung Mobile Firmware Samsung Mobile Firmware is affected by 436 known vulnerabilities: 3 critical, 50 high, 24 medium, 359 low Critical High Medium Low

Vulnerabilities (436)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118554 - Out-of-bounds write
CVE-2025-21042		 CWE-787 Critical
No
Exploited
 SMR-APR-2025 14.11.2025 SB20251114106
#VU107108 - Use After Free
CVE-2024-49848		 CWE-416 Low
No
No
 SMR-APR-2025 07.04.2025 SB2025040754
SB2025040766
SB20251114106
#VU107087 - Weak Authentication
CVE-2024-45551		 CWE-1390 Low
No
No
 SMR-APR-2025 07.04.2025 SB2025040754
SB2025040766
SB20251114106
#VU107059 - Exposure of sensitive information to an unauthorized actor
CVE-2025-22429		 CWE-200 Low
No
No
 SMR-APR-2025 07.04.2025 SB2025040766
SB20251114106
#VU107073 - Improper input validation
CVE-2025-26416		 CWE-20 Low
No
No
 SMR-APR-2025 07.04.2025 SB2025040766
SB20251114106
#VU107074 - Improper input validation
CVE-2025-22423		 CWE-20 Low
No
No
 SMR-APR-2025 07.04.2025 SB2025040766
SB20251114106
#VU107078 - Improper input validation
CVE-2025-22418		 CWE-20 Low
No
No
 SMR-APR-2025 07.04.2025 SB2025040766
SB20251114106
#VU107079 - Improper input validation
CVE-2025-22419		 CWE-20 Low
No
No
 SMR-APR-2025 07.04.2025 SB2025040766
SB20251114106
#VU107081 - Improper input validation
CVE-2025-22428		 CWE-20 Low
No
No
 SMR-APR-2025 07.04.2025 SB2025040766
SB20251114106
#VU107083 - Improper input validation
CVE-2025-22433		 CWE-20 Low
No
No
 SMR-APR-2025 07.04.2025 SB2025040766
SB20251114106
#VU107084 - Improper input validation
CVE-2025-22435		 CWE-20 Low
No
No
 SMR-APR-2025 07.04.2025 SB2025040766
SB20251114106
#VU107085 - Improper input validation
CVE-2025-22439		 CWE-20 Low
No
No
 SMR-APR-2025 07.04.2025 SB2025040766
SB20251114106
#VU105220 - Buffer overflow
CVE-2024-53027		 CWE-120 Medium
No
No
 SMR-APR-2025 03.03.2025 SB2025030344
SB2025030358
SB20251114106
#VU105217 - Improper Validation of Array Index
CVE-2024-53014		 CWE-129 Low
No
No
 SMR-APR-2025 03.03.2025 SB2025030344
SB2025030358
SB20251114106
#VU105210 - Integer overflow
CVE-2024-53025		 CWE-190 Low
No
No
 SMR-APR-2025 03.03.2025 SB2025030344
SB2025030358
SB20251114106
#VU105208 - Improper Authorization
CVE-2024-43051		 CWE-285 Low
No
No
 SMR-APR-2025 03.03.2025 SB2025030344
SB2025030358
SB20251114106
#VU105187 - Out-of-bounds write
CVE-2025-20645		 CWE-787 Low
No
No
 SMR-APR-2025 03.03.2025 SB2025030336
SB2025030358
SB20251114106
#VU102090 - Out-of-bounds write
CVE-2024-53197		 CWE-787 High
No
Exploited
 SMR-APR-2025 30.12.2024 SB20241230114
SB2025011046
SB2025011047
and 83 more
#VU101910 - Out-of-bounds read
CVE-2024-53150		 CWE-125 High
No
No
 SMR-APR-2025 27.12.2024 SB2024122704
SB2025010314
SB2025010315
and 92 more
#VU97818 - Off-by-one Error
CVE-2024-46852		 CWE-193 Low
No
No
 SMR-APR-2025 30.09.2024 SB2024093069
SB2024100401
SB2024101233
and 21 more


Showing elements 1 - 20 out of 436