Local Privilege Escalation via Improper Input Validation in Samsung Checkout

Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges.

Improper Input Validation Enables Local Privilege Escalation in Samsung Checkout

Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges.

Local Input Validation Flaw in Samsung Checkout Allows Arbitrary Activity Launch

Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout privileges.

Out‑of‑Bounds Write in libsmkvextractor.so Enables Local Code Execution

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.

Out-of-Bounds Write in Samsung TTS Library Enables Local Arbitrary Code Execution

Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.

Improper Input Validation Leading to Local Arbitrary Code Execution in Samsung’s HEIF Decoder

Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.

Local Arbitrary Code Execution via Improper Input Validation in Samsung HEIF Decoder

Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.

Use-After-Free in Samsung WSM Service Enables Local Code Execution

Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.

Local Access Control Failure Enabling Arbitrary Application Installation via ManagedProvisioning

Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications.

Improper Access Control Allows Local Attackers to Connect to PC via Link to Windows

Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction.

Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to access proxy configuration.

Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission.

Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information.

Local Arbitrary Activity Launch via Samsung Tips Input Validation Vulnerability (Android <17)

Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability.

Local Out-of-Bounds Write in Samsung Notes Allows Memory Corruption

Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory.

Improper Access Control in Samsung Mobile Collection Allows Local Sensitive Information Disclosure

Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information.

Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings.

Local Access Control Bypass in Samsung Watch Plugin

Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information.

Out-of-bounds Write in Samsung libsavscmn.so Enables Local Code Execution

Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code.

Out-of-Bounds Write in Samsung libsthmbc Allows Local Memory Corruption

Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of-bounds memory.