Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-20969 State: PUBLISHED Published: 2025-05-07T08:24:24.722Z Last Updated: 2025-05-07T15:51:19.190Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Gallery Problem Types: CWE-20: Improper Input Validation Description: Improper input validation in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows local attackers to access data within Samsung Gallery. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=05
CVE ID: CVE-2025-20970 State: PUBLISHED Published: 2025-05-07T08:24:25.907Z Last Updated: 2025-05-07T15:48:44.098Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Samsung Mobile Products: Bixby Vision Problem Types: CWE-284 Improper Access Control Description: Improper access control in Bixby Vision prior to version 3.8.1 in Android 13, 3.8.3 in Android 14, 3.8.21 in Android 15 allows local attackers to access image files with Bixby Vision privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=05
CVE ID: CVE-2025-20971 State: PUBLISHED Published: 2025-05-07T08:24:27.100Z Last Updated: 2025-05-07T15:31:50.079Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Flow Problem Types: CWE-20: Improper Input Validation Description: Improper input validation in Samsung Flow prior to version 4.9.17.6 allows local attackers to access data within Samsung Flow. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=05
CVE ID: CVE-2025-20972 State: PUBLISHED Published: 2025-05-07T08:24:28.604Z Last Updated: 2025-05-07T15:18:20.431Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Samsung Mobile Products: Samsung Flow Problem Types: CWE-925: Improper Verification of Intent by Broadcast Receiver Description: Improper verification of intent by broadcast receiver in Samsung Flow prior to version 4.9.17.6 allows local attackers to modify Samsung Flow configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=05
CVE ID: CVE-2025-20973 State: PUBLISHED Published: 2025-05-07T08:24:29.804Z Last Updated: 2025-05-07T14:57:33.940Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: Samsung Mobile Products: Secure Folder Problem Types: CWE-287 Improper Authentication Description: Improper authentication in Secure Folder prior to version 1.8.12.0 in Android 13, and 1.9.21.00 in Android 14 allows physical attackers to reset the lock type of Secure Folder. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=05
CVE ID: CVE-2025-20974 State: PUBLISHED Published: 2025-05-07T08:24:31.034Z Last Updated: 2025-05-07T14:39:19.056Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: Samsung Mobile Products: PackageInstallerCN Problem Types: CWE-280: Improper Handling of Insufficient Permissions or Privileges Description: Improper handling of insufficient permission in PackageInstallerCN prior to version 15.0.11.0 allows local attacker to bypass user interaction for requested installation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=05
CVE ID: CVE-2025-20975 State: PUBLISHED Published: 2025-05-07T08:24:32.229Z Last Updated: 2025-05-07T14:32:52.272Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: AODService Problem Types: CWE-926: Improper Export of Android Application Components Description: Improper Export of Android Application Components in AODService prior to version 8.8.28.12 allows local attackers to launch arbitrary activity with systemui privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=05
CVE ID: CVE-2025-20976 State: PUBLISHED Published: 2025-05-07T08:24:33.432Z Last Updated: 2025-05-07T14:19:03.533Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read in applying binary of text content in Samsung Notes prior to version 4.4.29.23 allows attackers to read out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=05
CVE ID: CVE-2025-20977 State: PUBLISHED Published: 2025-05-07T08:24:34.627Z Last Updated: 2025-05-07T14:06:03.881Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-927: Use of Implicit Intent for Sensitive Communication Description: Use of implicit intent for sensitive communication in translation in Samsung Notes prior to version 4.4.29.23 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=05
CVE ID: CVE-2025-20978 State: PUBLISHED Published: 2025-05-07T08:24:35.886Z Last Updated: 2025-05-07T14:02:47.630Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Samsung Mobile Products: PENUP Problem Types: CWE-284 Improper Access Control Description: Improper access control in PENUP prior to version 3.9.19.32 allows local attackers to access files with PENUP privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=05
CVE ID: CVE-2025-20979 State: PUBLISHED Published: 2025-05-07T08:24:37.071Z Last Updated: 2025-05-08T03:55:59.015Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: libsavscmn Problem Types: CWE-787: Out-of-bounds Write Description: Out-of-bounds write in libsavscmn prior to Android 15 allows local attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=05
CVE ID: CVE-2025-20980 State: PUBLISHED Published: 2025-05-07T08:34:33.661Z Last Updated: 2025-05-08T03:56:00.551Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Samsung Mobile Products: libsavscmn Problem Types: CWE-787: Out-of-bounds Write Description: Out-of-bounds write in libsavscmn prior to Android 15 allows local attackers to cause memory corruption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=05
CVE ID: CVE-2025-20981 State: PUBLISHED Published: 2025-06-04T04:56:12.399Z Last Updated: 2025-06-04T13:54:10.891Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in AudioService prior to SMR Jun-2025 Release 1 allows local attackers to access sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=06
CVE ID: CVE-2025-20982 State: PUBLISHED Published: 2025-07-08T10:33:29.597Z Last Updated: 2025-07-11T03:55:23.473Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Out-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=07
CVE ID: CVE-2025-20983 State: PUBLISHED Published: 2025-07-08T10:33:30.689Z Last Updated: 2025-07-11T03:55:24.217Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Out-of-bounds write in checking auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=07
CVE ID: CVE-2025-20984 State: PUBLISHED Published: 2025-06-04T04:56:14.569Z Last Updated: 2025-06-04T13:54:24.950Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-276: Incorrect Default Permissions Description: Incorrect default permission in Samsung Cloud for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to access data in Samsung Cloud for Galaxy Watch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=06
CVE ID: CVE-2025-20985 State: PUBLISHED Published: 2025-06-04T04:56:15.762Z Last Updated: 2025-06-04T13:54:42.802Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-269 Improper Privilege Management Description: Improper privilege management in ThemeManager prior to SMR Jun-2025 Release 1 allows local privileged attackers to reuse trial items. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=06
CVE ID: CVE-2025-20986 State: PUBLISHED Published: 2025-06-04T04:56:16.958Z Last Updated: 2025-06-04T13:54:56.276Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in ScreenCapture for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to take screenshots. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=06
CVE ID: CVE-2025-20987 State: PUBLISHED Published: 2025-06-04T04:56:18.161Z Last Updated: 2025-06-04T13:55:16.901Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor Description: Improper access control in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a auth_token. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=06
CVE ID: CVE-2025-20988 State: PUBLISHED Published: 2025-06-04T04:56:19.288Z Last Updated: 2025-06-04T13:55:34.064Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to read out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=06
CVE ID: CVE-2025-20989 State: PUBLISHED Published: 2025-06-04T04:56:20.416Z Last Updated: 2025-06-04T13:55:45.175Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor Description: Improper logging in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a hmac_key. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=06
CVE ID: CVE-2025-20990 State: PUBLISHED Published: 2025-08-06T04:22:30.327Z Last Updated: 2025-08-06T15:39:14.061Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to access device identifier. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=08
CVE ID: CVE-2025-20991 State: PUBLISHED Published: 2025-06-04T04:56:21.571Z Last Updated: 2025-06-04T13:55:57.300Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-926: Improper Export of Android Application Components Description: Improper export of Android application components in Bluetooth prior to SMR Jun-2025 Release 1 allows local attackers to make devices discoverable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=06
CVE ID: CVE-2025-20992 State: PUBLISHED Published: 2025-06-04T04:56:23.083Z Last Updated: 2025-06-04T13:46:34.765Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-122: Heap-based Buffer Overflow Description: Out-of-bound read in libsecimaging.camera.samsung.so prior to SMR Feb-2025 Release 1 allows local attackers to read out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=06
CVE ID: CVE-2025-20993 State: PUBLISHED Published: 2025-06-04T04:56:24.249Z Last Updated: 2025-06-04T13:46:18.364Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-122: Heap-based Buffer Overflow Description: Out-of-bounds write in libsecimaging.camera.samsung.so prior to SMR Jun-2025 Release 1 allows local attackers to write out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=06
CVE ID: CVE-2025-20994 State: PUBLISHED Published: 2025-06-04T04:56:25.391Z Last Updated: 2025-06-04T13:46:03.188Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Internet Problem Types: CWE-276: Incorrect Default Permissions Description: Improper handling of insufficient permission in SyncClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to access read and write arbitrary files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=06
CVE ID: CVE-2025-20995 State: PUBLISHED Published: 2025-06-04T04:56:26.511Z Last Updated: 2025-06-04T13:45:51.111Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Internet Problem Types: CWE-280: Improper handling of insufficient permission Description: Improper handling of insufficient permission in ClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to read and write arbitrary files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=06
CVE ID: CVE-2025-20996 State: PUBLISHED Published: 2025-06-04T04:56:27.658Z Last Updated: 2025-06-04T13:45:00.670Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Smart Switch Problem Types: CWE-285: Improper Authorization Description: Improper authorization in Smart Switch installed on non-Samsung Device prior to version 3.7.64.10 allows local attackers to read data with the privilege of Smart Switch. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=06
CVE ID: CVE-2025-20997 State: PUBLISHED Published: 2025-07-08T10:34:26.815Z Last Updated: 2025-07-11T13:30:15.085Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-276: Incorrect Default Permissions Description: Incorrect default permission in Framework for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to reset some configuration of Galaxy Watch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=07
CVE ID: CVE-2025-20998 State: PUBLISHED Published: 2025-07-08T10:34:27.871Z Last Updated: 2025-07-11T13:30:37.481Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=07
CVE ID: CVE-2025-20999 State: PUBLISHED Published: 2025-07-08T10:34:28.960Z Last Updated: 2025-07-11T13:30:56.921Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-285: Improper Authorization Description: Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025 Release 1 allows secondary users to access owner's saved Wi-Fi password. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=07
CVE ID: CVE-2025-21000 State: PUBLISHED Published: 2025-07-08T10:34:30.062Z Last Updated: 2025-07-11T13:31:14.543Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-269 Improper Privilege Management Description: Improper privilege management in Bluetooth prior to SMR Jul-2025 Release 1 allows local attackers to enable Bluetooth. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=07
CVE ID: CVE-2025-21001 State: PUBLISHED Published: 2025-07-08T10:34:31.111Z Last Updated: 2025-07-08T18:13:24.591Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to stop broadcasting Auracast. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=07
CVE ID: CVE-2025-21002 State: PUBLISHED Published: 2025-07-08T10:34:32.176Z Last Updated: 2025-07-08T18:13:19.682Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to manipulate broadcasting Auracast. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=07
CVE ID: CVE-2025-21003 State: PUBLISHED Published: 2025-07-08T10:34:33.197Z Last Updated: 2025-07-08T18:13:14.478Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-922: Insecure Storage of Sensitive Information Description: Insecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows local attackers to access sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=07
CVE ID: CVE-2025-21004 State: PUBLISHED Published: 2025-07-08T10:34:34.247Z Last Updated: 2025-07-08T18:13:09.259Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284 Improper Access Control Description: Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to power off the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=07
CVE ID: CVE-2025-21005 State: PUBLISHED Published: 2025-07-08T10:34:35.301Z Last Updated: 2025-07-08T18:13:04.011Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: isemtelephony Problem Types: CWE-284: Improper Access Control Description: Improper access control in isemtelephony prior to Android 15 allows local attackers to access sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=07
CVE ID: CVE-2025-21006 State: PUBLISHED Published: 2025-07-08T10:34:36.328Z Last Updated: 2025-07-08T14:27:58.853Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: libsavsvc.so Problem Types: CWE-787 Out-of-bounds Write Description: Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 allows local attackers to write out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=07
CVE ID: CVE-2025-21007 State: PUBLISHED Published: 2025-07-08T10:34:37.353Z Last Updated: 2025-07-08T18:12:57.766Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Samsung Mobile Products: libsavsvc.so Problem Types: CWE-787 Out-of-bounds Write Description: Out-of-bounds write in accessing uninitialized memory in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=07
CVE ID: CVE-2025-21008 State: PUBLISHED Published: 2025-07-08T10:34:38.396Z Last Updated: 2025-07-08T18:12:52.392Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Samsung Mobile Products: libsavsvc.so Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read in decoding frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=07
CVE ID: CVE-2025-21009 State: PUBLISHED Published: 2025-07-08T10:34:39.414Z Last Updated: 2025-07-08T18:12:46.947Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Samsung Mobile Products: libsavsvc.so Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read in decoding malformed frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=07