High 2 exploited CVEs WID-SEC-2025-1943 12 CVEs

Samsung Android: Mehrere Schwachstellen

Published Sep 2, 2025 · Updated Sep 14, 2025 · Revision 3 · de-DE

Vendor: Samsung Product: Android Platform: Android

Summary

Ein lokaler Angreifer der ein Angreifer mit physischem Zugriff kann mehrere Schwachstellen in Samsung Android ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder Daten zu manipulieren.

Product

Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.

Vulnerabilities 12

High 8.8

CVE-2025-21043 Exploited

Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitr…

Samsung Mobile Samsung Mobile Devices

Sep 12, 2025
KEV Oct 2, 2025
High 8.8

CVE-2025-48543 Exploited Public exploit

In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use af…

Google Android Android

Sep 4, 2025
KEV Sep 4, 2025
Medium 6.8

CVE-2025-21031

Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs.

Samsung Mobile Samsung Mobile Devices

Sep 3, 2025
Medium 5.9

CVE-2025-21032

Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode u…

Samsung Mobile Samsung Mobile Devices

Sep 3, 2025
Medium 5.5

CVE-2025-21028

Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reus…

Samsung Mobile Samsung Mobile Devices

Sep 3, 2025
Medium 5.1

CVE-2025-21025

Improper access control in MARsExemptionManager prior to SMR Sep-2025 Release 1 allows local attackers to be excluded f…

Samsung Mobile Samsung Mobile Devices

Sep 3, 2025
Medium 5.1

CVE-2025-21027

Improper verification of intent by broadcast receiver in ImsService prior to SMR Sep-2025 Release 1 allows local attack…

Samsung Mobile Samsung Mobile Devices

Sep 3, 2025
Medium 4.3

CVE-2025-21030

Improper handling of insufficient permission in AppPrelaunchManagerService prior to SMR Sep-2025 Release 1 in Chinese A…

Samsung Mobile Samsung Mobile Devices

Sep 3, 2025
Medium 4.0

CVE-2025-21026

Improper handling of insufficient permission in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to in…

Samsung Mobile Samsung Mobile Devices

Sep 3, 2025
Medium 4.0

CVE-2025-21029

Improper handling of insufficient permission in System UI prior to SMR Sep-2025 Release 1 allows local attackers to sen…

Samsung Mobile Samsung Mobile Devices

Sep 3, 2025
Medium 4.0

CVE-2025-21033

Improper access control in ContactProvider prior to SMR Sep-2025 Release 1 allows local attackers to access sensitive i…

Samsung Mobile Samsung Mobile Devices

Sep 3, 2025
Medium 4.0

CVE-2025-21034

Out-of-bounds write in libsavsvc.so prior to SMR Sep-2025 Release 1 allows local attackers to potentially execute arbit…

Samsung Mobile Samsung Mobile Devices

Sep 3, 2025

Revision history

2025-09-14 #3
Aktive Ausnutzung gemeldet
2025-09-03 #2
Referenz(en) aufgenommen: EUVD-2025-26509, EUVD-2025-26510, EUVD-2025-26600, EUVD-2025-26511, EUVD-2025-26626, EUVD-2025-26618, EUVD-2025-26513, EUVD-2025-26512
2025-09-02 #1
Initiale Fassung

References

Samsung Security Updates vom 2025-09-02
https://security.samsungmobile.com/securityUpdate.smsb
The Hackernews vom 2025-09-02
https://thehackernews.com/2025/09/samsung-fixes-critical-zero-day-cve.html