Known vulnerabilities in Samsung Mobile Firmware SMR-APR-2021 - page 2

Vendor: Samsung
Software: Samsung Mobile Firmware
Version: SMR-APR-2021
Software CPE: cpe:2.3:a:samsung:samsung_mobile_firmware:*:*:*:*:*:*:*:*
Website: https://www.samsung.com/
Total vulnerabilities: 52
Public exploits: 3
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Samsung Mobile Firmware version SMR-APR-2021 Samsung Mobile Firmware SMR-APR-2021 is affected by 52 vulnerabilities: 1 critical, 5 high, 3 medium, 43 low Critical High Medium Low

Vulnerabilities (52)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115198 - Incorrect Default Permissions
CVE-2025-21028		 CWE-276 Low
No
No
 SMR-SEP-2025 12.09.2025 SB2025091260
#VU115197 - Incorrect Default Permissions
CVE-2025-21029		 CWE-276 Low
No
No
 SMR-SEP-2025 12.09.2025 SB2025091260
#VU115196 - Permissions, Privileges, and Access Controls
CVE-2025-21030		 CWE-264 Low
No
No
 SMR-SEP-2025 12.09.2025 SB2025091260
#VU115195 - Improper Access Control
CVE-2025-21031		 CWE-284 Low
No
No
 SMR-SEP-2025 12.09.2025 SB2025091260
#VU115194 - Out-of-bounds write
CVE-2025-21043		 CWE-787 Critical
No
Exploited
 SMR-SEP-2025 12.09.2025 SB2025091260
#VU114741 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-021701		 CWE-362 Low
No
No
 SMR-SEP-2025 02.09.2025 SB2025090274
SB2025090275
SB2025091260
#VU114711 - Improper input validation
CVE-2025-48550		 CWE-20 Low
No
No
 SMR-SEP-2025 02.09.2025 SB2025090275
SB2025091260
#VU114712 - Improper input validation
CVE-2025-48554		 CWE-20 Low
No
No
 SMR-SEP-2025 02.09.2025 SB2025090275
SB2025091260
#VU114713 - Improper input validation
CVE-2025-48559		 CWE-20 Low
No
No
 SMR-SEP-2025 02.09.2025 SB2025090275
SB2025091260
#VU114717 - Improper input validation
CVE-2025-26464		 CWE-20 Low
No
No
 SMR-SEP-2025 02.09.2025 SB2025090275
SB2025091260
#VU114719 - Improper input validation
CVE-2025-32323		 CWE-20 Low
No
No
 SMR-SEP-2025 02.09.2025 SB2025090275
SB2025091260
#VU114648 - Buffer over-read
CVE-2025-47326		 CWE-126 Medium
No
No
 SMR-SEP-2025 01.09.2025 SB2025090133
SB2025090275
SB2025091260
#VU114650 - Buffer over-read
CVE-2025-47328		 CWE-126 Medium
No
No
 SMR-SEP-2025 01.09.2025 SB2025090133
SB2025090275
SB2025091260
#VU114651 - Release of invalid pointer or reference
CVE-2025-47329		 CWE-763 Low
No
No
 SMR-SEP-2025 01.09.2025 SB2025090133
SB2025090275
SB2025091260
#VU114641 - Improper Access Control Applied to Mirrored or Aliased Memory Regions
CVE-2025-27032		 CWE-1257 Low
No
No
 SMR-SEP-2025 01.09.2025 SB2025090133
SB2025090275
SB2025091260
#VU114637 - Cryptographic Issues
CVE-2025-21482		 CWE-310 Low
No
No
 SMR-SEP-2025 01.09.2025 SB2025090133
SB2025090275
SB2025091260
and 1 more
#VU113313 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-38352		 CWE-362 High
Public exploit available
Exploited
 SMR-SEP-2025 27.07.2025 SB2025072788
SB2025081507
SB20250816180
and 144 more
#VU106251 - Permissions, Privileges, and Access Controls
CVE-2024-7881		 CWE-264 Low
No
No
 SMR-SEP-2025 29.03.2025 SB2025032925
SB20250329123
SB20250329124
and 5 more
#VU104999 - NULL Pointer Dereference
CVE-2025-21755		 CWE-476 Low
No
No
 SMR-SEP-2025 27.02.2025 SB2025022796
SB2025052639
SB2025061222
and 19 more
#VU81398 - Improper input validation
CVE-2023-40130		 CWE-20 Low
Public exploit available
No
 SMR-SEP-2025 02.10.2023 SB2025091260
SB2025120164


Showing elements 21 - 40 out of 52