Critical 1 exploited CVE WID-SEC-2025-0726 16 CVEs

Samsung Android: Mehrere Schwachstellen

Published Apr 7, 2025 · Updated Nov 9, 2025 · Revision 2 · de-DE

Vendor: Samsung Product: Android Platform: Android

Summary

Ein Angreifer kann mehrere Schwachstellen in Samsung Android ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen preiszugeben, beliebigen Code auszuführen oder einen Denial-of-Service-Zustand zu verursachen.

Product

Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.

Vulnerabilities 16

High 8.8

CVE-2025-21042 Exploited Public exploit EPSS 36%

Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitr…

Samsung Mobile Samsung Mobile Devices

Sep 12, 2025
KEV Nov 10, 2025
High 8.8

CVE-2025-20936

Improper access control in HDCP trustlet prior to SMR Apr-2025 Release 1 allows local attackers with shell privilege to…

Samsung Mobile Samsung Mobile Devices

Apr 8, 2025
High 8.8

CVE-2025-20946

Improper handling of exceptional conditions in pairing specific bluetooth devices in Galaxy Watch Bluetooth pairing pri…

Samsung Mobile Samsung Mobile Devices

Apr 8, 2025
Medium 6.4

CVE-2025-20943

Out-of-bounds write in secfr trustlet prior to SMR Apr-2025 Release 1 allows local privileged attackers to cause memory…

Samsung Mobile Samsung Mobile Devices

Apr 8, 2025
Medium 6.2

CVE-2025-20941

Improper access control in InputManager to SMR Apr-2025 Release 1 allows local attackers to access the scancode of spec…

Samsung Mobile Samsung Mobile Devices

Apr 8, 2025
Medium 6.2

CVE-2025-20944

Out-of-bounds read in parsing audio data in libsavsac.so prior to SMR Apr-2025 Release 1 allows local attackers to read…

Samsung Mobile Samsung Mobile Devices

Apr 8, 2025
Medium 5.5

CVE-2025-20934

Improper access control in Sticker Center prior to SMR Apr-2025 Release 1 allows local attackers to access image files …

Samsung Mobile Samsung Mobile Devices

Apr 8, 2025
Medium 5.5

CVE-2025-20935

Improper handling of insufficient permission or privileges in ClipboardService prior to SMR Apr-2025 Release 1 allows l…

Samsung Mobile Samsung Mobile Devices

Apr 8, 2025
Medium 5.5

CVE-2025-20938

Improper access control in SamsungContacts prior to SMR Apr-2025 Release 1 allows local attackers to access protected d…

Samsung Mobile Samsung Mobile Devices

Apr 8, 2025
Medium 5.5

CVE-2025-20947

Improper handling of insufficient permission or privileges in ClipboardService prior to SMR Apr-2025 Release 1 allows l…

Samsung Mobile Samsung Mobile Devices

Apr 8, 2025
Medium 5.5

CVE-2025-20948

Out-of-bounds read in enrollment with cdsp frame secfr trustlet prior to SMR Apr-2025 Release 1 allows local privileged…

Samsung Mobile Samsung Mobile Devices

Apr 8, 2025
Medium 5.5

CVE-2025-20952

Improper access control in Mdecservice prior to SMR Apr-2025 Release 1 allows local attackers to access arbitrary files…

Samsung Mobile Samsung Mobile Devices

Apr 9, 2025
Medium 5.4

CVE-2025-20939

Improper authorization in wireless download protocol in Galaxy Watch prior to SMR Apr-2025 Release 1 allows physical at…

Samsung Mobile Samsung Mobile Devices

Apr 8, 2025
Medium 4.4

CVE-2025-20942

Improper Verification of Intent by Broadcast Receiver in DeviceIdService prior to SMR Apr-2025 Release 1 allows local a…

Samsung Mobile Samsung Mobile Devices

Apr 8, 2025
Medium 4.0

CVE-2025-20940

Improper handling of insufficient permission in Samsung Device Health Manager Service prior to SMR Apr-2025 Release 1 a…

Samsung Mobile Samsung Mobile Devices

Apr 8, 2025
Medium 4.0

CVE-2025-20945

Improper access control in Galaxy Watch prior to SMR Apr-2025 Release 1 allows local attackers to access sensitive info…

Samsung Mobile Samsung Mobile Devices

Apr 8, 2025

Revision history

2025-11-09 #2
Aktive Ausnutzung gemeldet
2025-04-07 #1
Initiale Fassung

References

Samsung Security Update vom 2025-04-07
https://security.samsungmobile.com/securityUpdate.smsb
Paloalto Research vom 2025-11-09
https://unit42.paloaltonetworks.com/landfall-is-new-commercial-grade-android-spyware/