High WID-SEC-2026-3751 13 CVEs

Samsung Android: Mehrere Schwachstellen

Published Oct 5, 2026 · Updated Oct 11, 2026 · Revision 2 · de-DE

Vendor: Samsung Product: Android Platform: Android

Summary

Ein Angreifer kann mehrere Schwachstellen in Samsung Android ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen und um einen nicht näher spezifizierten Angriff durchzuführen.

Product

Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.

Vulnerabilities 13

High 8.9

CVE-2026-21120

Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary c…

Samsung Mobile Samsung Mobile Devices

Oct 12, 2026
High 8.6

CVE-2026-21124

Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 a…

Samsung Mobile Samsung Mobile Devices

Oct 12, 2026
High 8.6

CVE-2026-21125

Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows…

Samsung Mobile Samsung Mobile Devices

Oct 12, 2026
High 7.0

CVE-2026-21114

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary …

Samsung Mobile Samsung Mobile Devices

Oct 12, 2026
High 7.0

CVE-2026-21122

Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary cod…

Samsung Mobile Samsung Mobile Devices

Oct 12, 2026
Medium 6.9

CVE-2026-21118

Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in s…

Samsung Mobile Samsung Mobile Devices

Oct 12, 2026
Medium 6.9

CVE-2026-21121

Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use t…

Samsung Mobile Samsung Mobile Devices

Oct 12, 2026
Medium 6.9

CVE-2026-21126

Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 a…

Samsung Mobile Samsung Mobile Devices

Oct 12, 2026
Medium 6.7

CVE-2026-21123

Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with ro…

Samsung Mobile Samsung Mobile Devices

Oct 12, 2026
Medium 5.1

CVE-2026-21115

Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-…

Samsung Mobile Samsung Mobile Devices

Oct 12, 2026
Medium 5.1

CVE-2026-21116

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bound…

Samsung Mobile Samsung Mobile Devices

Oct 12, 2026
Medium 5.1

CVE-2026-21117

Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitiv…

Samsung Mobile Samsung Mobile Devices

Oct 12, 2026
Medium 4.8

CVE-2026-21119

Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to…

Samsung Mobile Samsung Mobile Devices

Oct 12, 2026

Revision history

2026-10-11 #2
Referenz(en) aufgenommen: EUVD-2026-97186, EUVD-2026-97187, EUVD-2026-97189, EUVD-2026-97188, EUVD-2026-97185, EUVD-2026-97184, EUVD-2026-97190, EUVD-2026-97183, EUVD-2026-97182, EUVD-2026-97181, EUVD-2026-97180, EUVD-2026-97179, EUVD-2026-97178
2026-10-05 #1
Initiale Fassung

References

Samsung Android Patchday October vom 2026-10-05
https://security.samsungmobile.com/securityUpdate.smsb