Improper Access Control in SamsungSEAgentService Allows Local Sensitive Information Disclosure

Improper access control in SamsungSEAgentService prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information.

Out-of-Bounds Memory Write in Samsung DNG Parser

Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory.

Improper Component Export Enables Privileged Code Execution in Samsung Bixby

Improper export of android application components in Bixby prior to version 4.0.70.8 allows local attackers to execute arbitrary commands with Bixby privilege.

Improper Access Control in Samsung IAFDService Allowing Local Privileged API Abuse

Improper access control in IAFDService prior to SMR Jul-2026 Release 1 allows local privileged attackers to use the privileged APIs.

Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to potentially execute arbitrary code.

FabricKeymaster Trustlet Race Condition Enabling Local Privilege Escalation

Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR Jul-2026 Release 1 allows local privileged attackers to execute arbitrary code.

Local Improper Access Control in Samsung SmartThingsKit Enables Sensitive Information Disclosure

Improper access control in SmartThingsKit prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information.

Path Traversal in Wallpaper Service Enabling Privilege Escalation on Samsung Mobile Devices

Path traversal in Wallpaper service prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system server privilege.

Improper Authorization in KnoxGuardManager Leading to Local Persistence Configuration Bypass

Improper authorization in KnoxGuardManager prior to SMR Jul-2026 Release 1 allows local attackers to bypass the persistence configuration of the application.

Out-of-Bounds Write Vulnerability in Samsung Mobile Image Codec

Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory.

Local Out-of-Bounds Write in libpadm.so Enables Arbitrary Code Execution

Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary code.

Local Permission Escalation Enables Unauthorized WLAN Configuration

Incorrect default permissions in WLAN security prior to SMR Jul-2026 Release 1 allows local attackers to configure TencentWifiSecurity settings.

Local Arbitrary File Creation via Improper Input Validation in Samsung Email

Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the application sandbox.

Local Data Access via Improper Export in InputSharing

Improper export of android application components in InputSharing prior to version 2.7.01.4 allows local attackers to access sharing data.

Local Authorization Bypass in Samsung Health Exposes Device Information

Improper authorization in Samsung Health prior to version 7.00.0.107 allows local attackers to access connected device information.

Out‑of‑Bounds Memory Write in Samsung Pass Allows Local Privileged Exploits

Improper input validation in Samsung Pass prior to version 5.2.10.3 allows local privileged attackers to write out-of-bounds memory.

Improper export of android application components in SmartHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script.

Improperly Exported Android Component Enables Local Code Execution in Samsung Assistant

Improper export of android application components in ExpressHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script.

Local Improper Authorization in Samsung Internet Enabled Sensitive Information Disclosure

Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive information.

Local Privilege Escalation via Misconfigured Telephony Component

Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.