Samsung Mobile has 36 CVEs on record. Disclosure cadence is accelerating: 35 in the last 90 days against 1 in the 90 before. The busiest recent month was October 2026 with 28. The median CVSS is 6.9 (medium). None have a confirmed exploitation report. The dominant weakness classes are CWE-20 (9) and CWE-787 (8). Most affected products: Samsung Mobile Devices (18), Samsung Checkout (3), Samsung Flow (3).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.9
- Publish → KEV
- —
- Last 90 days
- 35 prev 1
Products
- Samsung Mobile Devices 18
- Samsung Checkout 3
- Samsung Flow 3
- Smart Switch 3
- Samsung Internet 2
- Bixby 1
Worst active — by depth score
CVE-2026-21120High· 8.9Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.49CVE-2026-21042High· 8.7Out-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows remote attackers to execute arbitrary code.48CVE-2026-21125High· 8.6Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.47CVE-2026-21124High· 8.6Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.47CVE-2026-21087High· 8.6Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege.47
Samsung Mobile vulnerabilities
CVEs affecting Samsung Mobile, newest first. Open any entry for full detail, references, and exploit status.
36 CVEsRSS
CVE-2026-21101High· 8.4Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege.
Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege.
CVE-2026-21100Medium· 6.9Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity.
Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity.
CVE-2026-21111Medium· 6.9Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of-bounds memory.
Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of-bounds memory.
CVE-2026-21109Low· 2.1Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information.
Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information.
CVE-2026-21110Medium· 6.9Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code.
Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code.
CVE-2026-21042High· 8.7Out-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows remote attackers to execute arbitrary code.
Out-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows remote attackers to execute arbitrary code.