High WID-SEC-2025-2219 12 CVEs

Samsung Android: Mehrere Schwachstellen

Published Oct 6, 2025 · Updated Oct 12, 2025 · Revision 3 · de-DE

Vendor: Samsung Product: Android Platform: Android

Summary

Ein Angreifer kann mehrere Schwachstellen in Samsung Android ausnutzen, um beliebigen Code auszuführen, sensible Daten offenzulegen oder zu modifizieren, Speicherbeschädigungen zu verursachen oder andere nicht näher spezifizierte Angriffe durchzuführen.

Product

Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.

Vulnerabilities 12

High 7.1

CVE-2025-21050

Improper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local attackers to access data across mul…

Samsung Mobile Samsung Mobile Devices

Oct 10, 2025
Medium 6.7

CVE-2025-21048

Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to execute arbitrary …

Samsung Mobile Samsung Mobile Devices

Oct 10, 2025
Medium 5.7

CVE-2025-21044

Out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write …

Samsung Mobile Samsung Mobile Devices

Oct 10, 2025
Medium 5.5

CVE-2025-21049

Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive infor…

Samsung Mobile Samsung Mobile Devices

Oct 10, 2025
Medium 5.2

CVE-2025-21047

Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged AP…

Samsung Mobile Samsung Mobile Devices

Oct 10, 2025
Medium 4.3

CVE-2025-21055

Out-of-bounds read and write in libimagecodec.quram.so prior to SMR Oct-2025 Release 1 allows remote attackers to acces…

Samsung Mobile Samsung Mobile Devices

Oct 10, 2025
Medium 4.0

CVE-2025-21045

Insecure storage of sensitive information in Galaxy Watch prior to SMR Oct-2025 Release 1 allows local attackers to acc…

Samsung Mobile Samsung Mobile Devices

Oct 10, 2025
Medium 4.0

CVE-2025-21051

Out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local a…

Samsung Mobile Samsung Mobile Devices

Oct 10, 2025
Medium 4.0

CVE-2025-21052

Out-of-bounds write under specific condition in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025…

Samsung Mobile Samsung Mobile Devices

Oct 10, 2025
Medium 4.0

CVE-2025-21053

Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local …

Samsung Mobile Samsung Mobile Devices

Oct 10, 2025
Medium 4.0

CVE-2025-21054

Out-of-bounds read in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local a…

Samsung Mobile Samsung Mobile Devices

Oct 10, 2025
Low 2.4

CVE-2025-21046

Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to te…

Samsung Mobile Samsung Mobile Devices

Oct 10, 2025

Revision history

2025-10-12 #3
Referenz(en) aufgenommen: EUVD-2025-33662
2025-10-09 #2
Referenz(en) aufgenommen: EUVD-2025-33677, EUVD-2025-33678, EUVD-2025-33679, EUVD-2025-33680, EUVD-2025-33682, EUVD-2025-33683, EUVD-2025-33684, EUVD-2025-33685, EUVD-2025-33686, EUVD-2025-33687
2025-10-06 #1
Initiale Fassung

References

Samsung Security Updates vom 2025-10-06
https://security.samsungmobile.com/securityUpdate.smsb