Summary
Ein Angreifer kann mehrere Schwachstellen in Samsung Android ausnutzen, um möglicherweise beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.
Product
Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
Vulnerabilities 25
-
High 8.4
In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to…
KEV Jun 2, 2026 -
Critical 9.8CVE-2025-54957 Public exploit
An issue was discovered in Dolby UDC 4.5 through 4.13. A crash of the DD+ decoder process can occur when a malformed DD…
-
High 8.8
Incorrect Calculation of Buffer Size in SCE-Mink
Memory corruption while processing a GP command response.
-
High 8.4
In VerifyNoOverlapInSessions of apexd.cpp, there is a possible way to block security updates due to a logic error in th…
-
High 8.0CVE-2025-48593 Public exploit
In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code execution due to a use after free. T…
-
High 7.8CVE-2023-40130 Public exploit
In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code. T…
-
High 7.8
In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue reading notifications w…
-
High 7.8
In multiple functions of CertInstaller.java, there is a possible way to install certificates due to a permissions bypas…
-
High 7.8CVE-2025-48583 Public exploit
In multiple functions of BaseBundle.java, there is a possible way to execute arbitrary code due to a logic error in the…
-
High 7.8
In startAlwaysOnVpn of Vpn.java, there is a possible way to disable always-on VPN due to a logic error in the code. Thi…
-
High 7.8
In multiple functions of HeaderPrivacyIconsController.kt, there is a possible way to grand permissions across user due …
-
High 7.8
In onUidImportance of DisassociationProcessor.java, there is a possible way to retain companion application privileges …
-
High 7.8
In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to l…
-
High 7.8
In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay …
-
High 7.8
In multiple functions of WifiScanModeActivity.java, there is a possible way to bypass a device config restriction due t…
-
High 7.8
In setDefaultKey of DefaultPaymentSettings.java, there is a possible way for an application to set the main user's defa…
-
Medium 6.7CVE-2025-20730 Public exploit
In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local es…
-
Medium 6.7
In notifyTimeout of CallRedirectionProcessor.java, there is a possible persistent connection due to improper input vali…
-
Medium 6.6
In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deput…
-
Medium 6.5
Reachable Assertion in BT Controller
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
-
Medium 6.5
In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could …
-
Medium 5.5
In verifyAndGetBypass of AppOpsService.java, there is a possible method for a malicious app to prevent dialing emergenc…
-
Medium 5.5
In multiple files, there is a possible way to reveal information across users due to a missing permission check. This c…
-
Medium 5.5
In InputMethodInfo of InputMethodInfo.java, there is a possible permanent denial of service due to resource exhaustion.…
-
Medium 5.5
In multiple locations, there is a possible way to read files from another user due to a missing permission check. This …
Revision history
-
#4
Referenz(en) aufgenommen: EUVD-2025-210013
-
#3
Referenz(en) aufgenommen: EUVD-2025-201752, EUVD-2025-201755, EUVD-2025-201756, EUVD-2025-201758, EUVD-2025-201759, EUVD-2025-201760, EUVD-2025-201761, EUVD-2025-201762, EUVD-2025-201763, EUVD-2025-201764, EUVD-2025-201766, EUVD-2025-201767, EUVD-2025-201768, EUVD-2025-201774, EUVD-2025-201771, EUVD-2025-201782, EUVD-2025-201787
-
#2
Referenz(en) aufgenommen: EUVD-2025-197910
-
#1
Initiale Fassung
References
-
Samsung Security Updates November 2025 (SMR-NOV-2025) vom 2025-11-03
https://security.samsungmobile.com/securityUpdate.smsb