Galaxy Themes Arbitrary Activity via Improper Input Validation

Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity.

Local Privilege Escalation via Improper Input Validation in Samsung Contacts

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.

Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.

Unauthorized Cross‑Profile Data Access via Improper Input Validation in Samsung Contacts

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles.

SIM Function Access Vulnerability in Samsung Dialer

Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction is required for triggering this vulnerability.

Local Clipboard Data Access via Authorization Bypass in Samsung SemClipboardService

Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.

AppLock Improper Export Enables Physical Access Bypass

Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function.

Improper Access Control in Samsung Weaver Enables Local Attacker to Disrupt Device Functionality

Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability.

Out-of-Bounds Memory Write in Samsung FLAC Decoder (libcodec2_sec_flacdec.so)

Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.

Stack-Based Buffer Overflow in Samsung Mobile Device libril_sem.so

Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code.

Improper Access Control in SamsungSEAgentService Allows Local Sensitive Information Disclosure

Improper access control in SamsungSEAgentService prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information.

Out-of-Bounds Memory Write in Samsung DNG Parser

Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory.

Improper Access Control in Samsung IAFDService Allowing Local Privileged API Abuse

Improper access control in IAFDService prior to SMR Jul-2026 Release 1 allows local privileged attackers to use the privileged APIs.

Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to potentially execute arbitrary code.

FabricKeymaster Trustlet Race Condition Enabling Local Privilege Escalation

Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR Jul-2026 Release 1 allows local privileged attackers to execute arbitrary code.

Local Improper Access Control in Samsung SmartThingsKit Enables Sensitive Information Disclosure

Improper access control in SmartThingsKit prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information.

Path Traversal in Wallpaper Service Enabling Privilege Escalation on Samsung Mobile Devices

Path traversal in Wallpaper service prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system server privilege.

Improper Authorization in KnoxGuardManager Leading to Local Persistence Configuration Bypass

Improper authorization in KnoxGuardManager prior to SMR Jul-2026 Release 1 allows local attackers to bypass the persistence configuration of the application.

Out-of-Bounds Write Vulnerability in Samsung Mobile Image Codec

Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory.

Local Out-of-Bounds Write in libpadm.so Enables Arbitrary Code Execution

Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary code.