| CVE-2025-21070 | 中5.5 | Out-of-bounds write in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to write out-of-bounds memory. | 10/10/2025 |
| CVE-2025-21069 | 高7.1 | Out-of-bounds read in the parsing of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory. | 10/10/2025 |
| CVE-2025-21068 | 高7.1 | Out-of-bounds read in the reading of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory. | 10/10/2025 |
| CVE-2025-21067 | 高7.1 | Out-of-bounds read in the allocation of image buffer in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory. | 10/10/2025 |
| CVE-2025-21066 | 高7.1 | Out-of-bounds read in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory. | 10/10/2025 |
| CVE-2025-21064 | 中6.5 | Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data. | 10/10/2025 |
| CVE-2025-21063 | 中4.6 | Improper access control in Samsung Voice Recorder prior to version 21.5.73.12 in Android 15 and 21.5.81.40 in Android 16 allows physical attackers to access recording files on the lock screen. | 10/10/2025 |
| CVE-2025-21062 | 高7.8 | Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability. | 10/10/2025 |
| CVE-2025-21061 | 中5.5 | Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive data. User interaction is required for triggering this vulnerability. | 10/10/2025 |
| CVE-2025-21060 | 中5.5 | Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability. | 10/10/2025 |
| CVE-2025-21059 | 中5.5 | Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health. | 10/10/2025 |
| CVE-2025-21057 | 低3.3 | Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allows local attackers to access shared notes. | 10/10/2025 |
| CVE-2024-34598 | 中5.5 | Improper export of component in GoodLock prior to version 2.2.04.95 allows local attackers to install arbitrary applications from Galaxy Store. | 04/09/2025 |
| CVE-2025-21040 | 低3.3 | Improper verification of intent by ExternalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information. | 03/09/2025 |
| CVE-2025-21039 | 低3.3 | Improper verification of intent by SystemExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information. | 03/09/2025 |
| CVE-2025-21038 | 低3.3 | Improper verification of intent by SamsungExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information. | 03/09/2025 |
| CVE-2025-21037 | 中4.3 | Improper access control in Samsung Notes prior to version 4.4.30.63 allows physical attackers to access data across multiple user profiles. User interaction is required for triggering this vulnerability. | 03/09/2025 |
| CVE-2025-21036 | 中5.0 | Improper access control in Samsung Notes prior to version 4.4.30.63 allows local privileged attackers to access exported note files. User interaction is required for triggering this vulnerability. | 03/09/2025 |
| CVE-2025-21035 | 中4.6 | Improper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15 allows physical attackers to access data across multiple user profiles. | 03/09/2025 |
| CVE-2023-21483 | 中5.5 | Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service. | 03/09/2025 |