Samsung

Known Exploited Vulnerabilities 15CVEs

• CVE-2024-7399MagicINFO 9 ServerApr 24, 202670.7% EPSS

  Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to write arbitrary files as system authority.

• CVE-2025-21042Mobile DevicesNov 10, 20254.4% EPSS

  Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so. This vulnerability could allow remote attackers to execute arbitrary code.

• CVE-2025-21043Mobile DevicesOct 2, 20254.9% EPSS

  Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so which allows remote attackers to execute arbitrary code.

• CVE-2025-4632MagicINFO 9 ServerMay 22, 202542.6% EPSS

  Samsung MagicINFO 9 Server contains a path traversal vulnerability that allows an attacker to write arbitrary file as system authority.

• CVE-2022-22265Mobile DevicesSep 18, 20230.2% EPSS

  Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution.

• CVE-2021-25487Mobile DevicesJun 29, 20232.6% EPSS

  Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a buffer in set_skb_priv(), leading to remote code execution by dereference of an invalid function pointer.

• CVE-2021-25489Mobile DevicesJun 29, 20230.3% EPSS

  Samsung mobile devices contain an improper input validation vulnerability within the modem interface driver that results in a format string bug leading to kernel panic.

• CVE-2021-25394Mobile DevicesJun 29, 20230.4% EPSS

  Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.

• CVE-2021-25395Mobile DevicesJun 29, 20230.2% EPSS

  Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.

• CVE-2021-25371Mobile DevicesJun 29, 20231.6% EPSS

  Samsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP.