https://vulnogram.org/ Most recent CVEs assigned by Samsung Mobile (samsung_mobile). https://vulnogram.org/seaview/icons/samsung_mobile.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2023-42555 https://vulnogram.org/CVE-2023-42555 Use of implicit intent for sensitive communication vulnerability in EasySetup prior to version 11.1.13 allows attackers to get the bluetooth address of user device. Medium Tue, 07 Nov 2023 07:49:54 GMT https://vulnogram.org/CVE-2023-42554 https://vulnogram.org/CVE-2023-42554 Improper Authentication vulnerabiity in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication. Medium Tue, 07 Nov 2023 07:49:53 GMT https://vulnogram.org/CVE-2023-42553 https://vulnogram.org/CVE-2023-42553 Improper authorization verification vulnerability in Samsung Email prior to version 6.1.90.4 allows attackers to read sandbox data of email. Medium Tue, 07 Nov 2023 07:49:52 GMT https://vulnogram.org/CVE-2023-42552 https://vulnogram.org/CVE-2023-42552 Implicit intent hijacking vulnerability in Firewall application prior to versions 12.1.00.24 in Android 11, 13.1.00.16 in Android 12 and 14.1.00.7 in Android 13 allows 3rd party application to tamper the database of Firewall. Medium Tue, 07 Nov 2023 07:49:51 GMT https://vulnogram.org/CVE-2023-42551 https://vulnogram.org/CVE-2023-42551 Use of implicit intent for sensitive communication vulnerability in startTncActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege. Medium Tue, 07 Nov 2023 07:49:50 GMT https://vulnogram.org/CVE-2023-42550 https://vulnogram.org/CVE-2023-42550 Use of implicit intent for sensitive communication vulnerability in startSignIn in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege. Medium Tue, 07 Nov 2023 07:49:49 GMT https://vulnogram.org/CVE-2023-42549 https://vulnogram.org/CVE-2023-42549 Use of implicit intent for sensitive communication vulnerability in startNameValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege. Medium Tue, 07 Nov 2023 07:49:48 GMT https://vulnogram.org/CVE-2023-42548 https://vulnogram.org/CVE-2023-42548 Use of implicit intent for sensitive communication vulnerability in startMandatoryCheckActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege. Medium Tue, 07 Nov 2023 07:49:47 GMT https://vulnogram.org/CVE-2023-42547 https://vulnogram.org/CVE-2023-42547 Use of implicit intent for sensitive communication vulnerability in startEmailValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege. Medium Tue, 07 Nov 2023 07:49:46 GMT https://vulnogram.org/CVE-2023-42546 https://vulnogram.org/CVE-2023-42546 Use of implicit intent for sensitive communication vulnerability in startAgreeToDisclaimerActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege. Medium Tue, 07 Nov 2023 07:49:44 GMT https://vulnogram.org/CVE-2023-42545 https://vulnogram.org/CVE-2023-42545 Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and 14.7.38 in Android 13 allows attackers to access location data. Medium Tue, 07 Nov 2023 07:49:43 GMT https://vulnogram.org/CVE-2023-42544 https://vulnogram.org/CVE-2023-42544 Improper access control vulnerability in Quick Share prior to 13.5.52.0 allows local attacker to access local files. Medium Tue, 07 Nov 2023 07:49:42 GMT https://vulnogram.org/CVE-2023-42543 https://vulnogram.org/CVE-2023-42543 Improper verification of intent by broadcast receiver vulnerability in Bixby Voice prior to version 3.3.35.12 allows attackers to access arbitrary data with Bixby Voice privilege. Medium Tue, 07 Nov 2023 07:49:41 GMT https://vulnogram.org/CVE-2023-42542 https://vulnogram.org/CVE-2023-42542 Improper access control vulnerability in Samsung Push Service prior to 3.4.10 allows local attackers to get register ID to identify the device. Low Tue, 07 Nov 2023 07:49:40 GMT https://vulnogram.org/CVE-2023-42541 https://vulnogram.org/CVE-2023-42541 Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id. Medium Tue, 07 Nov 2023 07:49:39 GMT https://vulnogram.org/CVE-2023-42540 https://vulnogram.org/CVE-2023-42540 Improper access control vulnerability in Samsung Account prior to version 14.5.01.1 allows attackers to access sensitive information via implicit intent. Medium Tue, 07 Nov 2023 07:49:38 GMT https://vulnogram.org/CVE-2023-42539 https://vulnogram.org/CVE-2023-42539 PendingIntent hijacking vulnerability in ChallengeNotificationManager in Samsung Health prior to version 6.25 allows local attackers to access data. Medium Tue, 07 Nov 2023 07:49:37 GMT https://vulnogram.org/CVE-2023-42538 https://vulnogram.org/CVE-2023-42538 An improper input validation in saped_rec_silence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write. Medium Tue, 07 Nov 2023 07:49:36 GMT https://vulnogram.org/CVE-2023-42537 https://vulnogram.org/CVE-2023-42537 An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write. High Tue, 07 Nov 2023 07:49:35 GMT https://vulnogram.org/CVE-2023-42536 https://vulnogram.org/CVE-2023-42536 An improper input validation in saped_dec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write. High Tue, 07 Nov 2023 07:49:34 GMT https://vulnogram.org/CVE-2023-42535 https://vulnogram.org/CVE-2023-42535 Out-of-bounds Write in read_block of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code. High Tue, 07 Nov 2023 07:49:33 GMT https://vulnogram.org/CVE-2023-42534 https://vulnogram.org/CVE-2023-42534 Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to read arbitrary files with system privilege. Medium Tue, 07 Nov 2023 07:49:32 GMT https://vulnogram.org/CVE-2023-42533 https://vulnogram.org/CVE-2023-42533 Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execute arbitrary code in Kernel. Medium Tue, 07 Nov 2023 07:49:31 GMT https://vulnogram.org/CVE-2023-42532 https://vulnogram.org/CVE-2023-42532 Improper Certificate Validation in FotaAgent prior to SMR Nov-2023 Release1 allows remote attacker to intercept the network traffic including Firmware information. Medium Network Exploitable Tue, 07 Nov 2023 07:49:30 GMT https://vulnogram.org/CVE-2023-42531 https://vulnogram.org/CVE-2023-42531 Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass restrictions on starting activities from the background. Medium Tue, 07 Nov 2023 07:49:29 GMT https://vulnogram.org/CVE-2023-42530 https://vulnogram.org/CVE-2023-42530 Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct without User Interaction. Medium Tue, 07 Nov 2023 07:49:28 GMT https://vulnogram.org/CVE-2023-42529 https://vulnogram.org/CVE-2023-42529 Out-of-bound write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to execute arbitrary code. Medium Tue, 07 Nov 2023 07:49:27 GMT https://vulnogram.org/CVE-2023-42528 https://vulnogram.org/CVE-2023-42528 Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code. Medium Tue, 07 Nov 2023 07:49:26 GMT https://vulnogram.org/CVE-2023-42527 https://vulnogram.org/CVE-2023-42527 Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to expose sensitive information. Medium Tue, 07 Nov 2023 07:49:25 GMT https://vulnogram.org/CVE-2023-30739 https://vulnogram.org/CVE-2023-30739 Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code. Medium Tue, 07 Nov 2023 07:45:38 GMT https://vulnogram.org/CVE-2023-30738 https://vulnogram.org/CVE-2023-30738 An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 and Galaxy Book Odyssey allows local attacker to execute SMM memory corruption. Medium Wed, 04 Oct 2023 03:02:51 GMT https://vulnogram.org/CVE-2023-30737 https://vulnogram.org/CVE-2023-30737 Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via implicit intent. Medium Wed, 04 Oct 2023 03:02:50 GMT https://vulnogram.org/CVE-2023-30736 https://vulnogram.org/CVE-2023-30736 Improper authorization in PushMsgReceiver of Samsung Assistant prior to version 8.7.00.1 allows attacker to execute javascript interface. To trigger this vulnerability, user interaction is required. Medium Wed, 04 Oct 2023 03:02:49 GMT https://vulnogram.org/CVE-2023-30735 https://vulnogram.org/CVE-2023-30735 Improper Preservation of Permissions vulnerability in SAssistant prior to version 8.7 allows local attackers to access backup data in SAssistant. Medium Wed, 04 Oct 2023 03:02:48 GMT https://vulnogram.org/CVE-2023-30734 https://vulnogram.org/CVE-2023-30734 Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via implicit intent. Medium Wed, 04 Oct 2023 03:02:47 GMT https://vulnogram.org/CVE-2023-30733 https://vulnogram.org/CVE-2023-30733 Stack-based Buffer Overflow in vulnerability HDCP trustlet prior to SMR Oct-2023 Release 1 allows local privileged attackers to perform code execution. High Wed, 04 Oct 2023 03:02:46 GMT https://vulnogram.org/CVE-2023-30732 https://vulnogram.org/CVE-2023-30732 Improper access control in system property prior to SMR Oct-2023 Release 1 allows local attacker to get CPU serial number. Medium Wed, 04 Oct 2023 03:02:45 GMT https://vulnogram.org/CVE-2023-30731 https://vulnogram.org/CVE-2023-30731 Logic error in package installation via debugger command prior to SMR Oct-2023 Release 1 allows physical attacker to install an application that has different build type. Medium Wed, 04 Oct 2023 03:02:44 GMT https://vulnogram.org/CVE-2023-30727 https://vulnogram.org/CVE-2023-30727 Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi and connect arbitrary Wi-Fi without User Interaction. Medium Wed, 04 Oct 2023 03:02:43 GMT https://vulnogram.org/CVE-2023-30692 https://vulnogram.org/CVE-2023-30692 Improper input validation vulnerability in Evaluator prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities. High Wed, 04 Oct 2023 03:02:14 GMT https://vulnogram.org/CVE-2023-30690 https://vulnogram.org/CVE-2023-30690 Improper input validation vulnerability in Duo prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities. High Wed, 04 Oct 2023 03:01:38 GMT https://vulnogram.org/CVE-2023-30730 https://vulnogram.org/CVE-2023-30730 Implicit intent hijacking vulnerability in Camera prior to versions 11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 12.1.03.10 in Android 12, and 13.0.01.43, 13.1.00.83 in Android 13 allows local attacker to access specific file. Low Wed, 06 Sep 2023 03:12:16 GMT https://vulnogram.org/CVE-2023-30729 https://vulnogram.org/CVE-2023-30729 Improper Certificate Validation in Samsung Email prior to version 6.1.82.0 allows remote attacker to intercept the network traffic including sensitive information. High Network Exploitable Wed, 06 Sep 2023 03:12:15 GMT https://vulnogram.org/CVE-2023-30728 https://vulnogram.org/CVE-2023-30728 Intent redirection vulnerability in PackageInstallerCHN prior to version 13.1.03.00 allows local attacker to access arbitrary file. This vulnerability requires user interaction. Medium Wed, 06 Sep 2023 03:12:14 GMT https://vulnogram.org/CVE-2023-30726 https://vulnogram.org/CVE-2023-30726 PendingIntent hijacking vulnerability in GameLauncher prior to version 4.2.59.5 allows local attackers to access data. Medium Wed, 06 Sep 2023 03:12:13 GMT https://vulnogram.org/CVE-2023-30725 https://vulnogram.org/CVE-2023-30725 Improper authentication in LocalProvier of Gallery prior to version 14.5.01.2 allows attacker to access the data in content provider. Medium Wed, 06 Sep 2023 03:12:12 GMT https://vulnogram.org/CVE-2023-30724 https://vulnogram.org/CVE-2023-30724 Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows attacker to access search history. Medium Wed, 06 Sep 2023 03:12:11 GMT https://vulnogram.org/CVE-2023-30723 https://vulnogram.org/CVE-2023-30723 Improper input validation vulnerability in Samsung Health prior to version 6.24.2.011 allows attackers to write arbitrary file with Samsung Health privilege. Medium Wed, 06 Sep 2023 03:12:10 GMT https://vulnogram.org/CVE-2023-30722 https://vulnogram.org/CVE-2023-30722 Protection Mechanism Failure in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.13.5 allows local attacker to execute arbitrary code. Medium Wed, 06 Sep 2023 03:12:09 GMT https://vulnogram.org/CVE-2023-30721 https://vulnogram.org/CVE-2023-30721 Insertion of sensitive information into log vulnerability in Locksettings prior to SMR Sep-2023 Release 1 allows a privileged local attacker to get lock screen match information from the log. Medium Wed, 06 Sep 2023 03:12:08 GMT