Medium WID-SEC-2026-2275 13 CVEs

Samsung Android: Mehrere Schwachstellen

Published Jul 9, 2026 · Updated Jul 9, 2026 · de-DE

Vendor: Samsung Product: Android Platform: Android

Summary

Ein Angreifer kann mehrere Schwachstellen in Samsung Android ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.

Product

Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.

Vulnerabilities 13

High 8.7

CVE-2026-21042

Out-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows remote attackers to execute arbitrary code.

Samsung Mobile Samsung Mobile Devices

Jul 10, 2026
High 8.4

CVE-2026-21045 Public exploit

Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remot…

Samsung Mobile Samsung Mobile Devices

Jul 10, 2026
High 8.4

CVE-2026-21046

Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR Jul-2026 Release 1 allows local privi…

Samsung Mobile Samsung Mobile Devices

Jul 10, 2026
High 8.4

CVE-2026-21048

Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote…

Samsung Mobile Samsung Mobile Devices

Jul 10, 2026
High 8.4

CVE-2026-21049

Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary c…

Samsung Mobile Samsung Mobile Devices

Jul 10, 2026
Medium 6.9

CVE-2026-21039

Improper access control in Settings prior to SMR Jul-2026 Release 1 allows local attackers to configure Theft protectio…

Samsung Mobile Samsung Mobile Devices

Jul 10, 2026
Medium 6.9

CVE-2026-21040

Improper access control in IAFDService prior to SMR Jul-2026 Release 1 allows local privileged attackers to use the pri…

Samsung Mobile Samsung Mobile Devices

Jul 10, 2026
Medium 6.9

CVE-2026-21041

Improper access control in SamsungSEAgentService prior to SMR Jul-2026 Release 1 allows local attackers to access sensi…

Samsung Mobile Samsung Mobile Devices

Jul 10, 2026
Medium 6.8

CVE-2026-21052

Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files…

Samsung Mobile Samsung Mobile Devices

Jul 10, 2026
Medium 6.7

CVE-2026-21043

Path traversal in Wallpaper service prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files w…

Samsung Mobile Samsung Mobile Devices

Jul 10, 2026
Medium 5.8

CVE-2026-21044

Improper authorization in KnoxGuardManager prior to SMR Jul-2026 Release 1 allows local attackers to bypass the persist…

Samsung Mobile Samsung Mobile Devices

Jul 10, 2026
Medium 5.1

CVE-2026-21050

Improper access control in SmartThingsKit prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive in…

Samsung Mobile Samsung Mobile Devices

Jul 10, 2026
Medium 5.1

CVE-2026-21051

Incorrect default permissions in WLAN security prior to SMR Jul-2026 Release 1 allows local attackers to configure Tenc…

Samsung Mobile Samsung Mobile Devices

Jul 10, 2026

Revision history

2026-07-09 #1
Initiale Fassung

References

Samsung Android Security Updates vom 2026-07-09
https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=07