Samsung known exploited vulnerabilities
Every Samsung CVE on CISA's Known Exploited Vulnerabilities catalog, newest addition first: 15 in all, 2 added in the last 12 months.
- CVE-2024-7399Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackSamsung Electronics MagicINFO 9 Server
- CVE-2025-21042Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.Samsung Mobile Devices
- CVE-2025-21043Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.Samsung Mobile Devices
- CVE-2025-4632Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackSamsung Electronics MagicINFO 9 Server
- CVE-2022-22265An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and codeSamsung Mobile Devices
- CVE-2021-25489Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format stSamsung Mobile Devices
- CVE-2021-25487Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it resSamsung Mobile Devices
- CVE-2021-25395A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilSamsung Mobile Devices
- CVE-2021-25394A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radioSamsung Mobile Devices
- CVE-2021-25372An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.Samsung Mobile Devices
- CVE-2021-25371A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.Samsung Mobile Devices
- CVE-2023-21492Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.Samsung Mobile Devices
- CVE-2021-25370An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kSamsung Mobile Devices
- CVE-2021-25369An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.Samsung Mobile Devices
- CVE-2021-25337Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to readSamsung Mobile Devices
Get alerts for new known exploited vulnerabilities
Only want the packages you use? Check a lockfile to get a feed for your stack.
https://cve.now/kev/feed
Paste into Feedly or any RSS reader, or run /feed subscribe https://cve.now/kev/feed in Slack. For email alerts, give it to an RSS-to-email service.
https://cve.now/kev/feed?format=atom
The same entries as Atom, for readers that prefer it.
https://cve.now/kev/feed?format=json
The same entries as JSON Feed 1.1, for scripts and readers that support it.
https://cve.now/api/v1/entries?filter=kev
Pages of 30 entries, newest first. Pass the response's next_cursor as cursor for the next page.
Frequently asked questions
How many Samsung vulnerabilities are in CISA KEV?
15 Samsung vulnerabilities are on CISA's Known Exploited Vulnerabilities catalog, 2 of them added in the last 12 months. The newest is CVE-2024-7399 (Samsung MagicINFO 9 Server Path Traversal Vulnerability), added 2026-04-24.
Which Samsung products are in CISA KEV?
2 products, including MagicINFO 9 Server, Mobile Devices. Attackers have exploited every one of these entries in the wild, and US federal agencies must patch each by its CISA due date.
Are Samsung KEV vulnerabilities used by ransomware?
CISA has no known ransomware use on record for Samsung's KEV entries.