Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

Samsung

Security incidents tagged Samsung. Newest first.

1 Samsung incident in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½LessMore
Incidents
5
Live
0
Patched
5
Days without an incident
346
Longest quiet run: 611 days (Sep 19–May 21)
Show 5 older incidents

November 2025 1

  • PatchedSamsung Mobile Devices: Mobile Devices Out-of-Bounds Write Vulnerability

    Samsung Mobile Devices

    Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so. This vulnerability could allow remote attackers to execute arbitrary code. Added to CISA KEV on 2025-11-10.

    Open incident →CVE-2025-21042

October 2025 1

  • PatchedSamsung Mobile Devices: Mobile Devices Out-of-Bounds Write Vulnerability

    Samsung Mobile Devices

    Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so which allows remote attackers to execute arbitrary code. Added to CISA KEV on 2025-10-02.

    Open incident →CVE-2025-21043

May 2025 1

  • PatchedSamsung MagicINFO 9 Server: MagicINFO 9 Server Path Traversal Vulnerability

    Samsung MagicINFO 9 Server

    Samsung MagicINFO 9 Server contains a path traversal vulnerability that allows an attacker to write arbitrary file as system authority. Added to CISA KEV on 2025-05-22.

    Open incident →CVE-2025-4632

September 2023 1

  • PatchedSamsung Mobile Devices: Use-After-Free (CVE-2022-22265)

    Samsung Mobile Devices

    Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution. Added to CISA KEV on 2023-09-18.

    Open incident →CVE-2022-22265

May 2023 1

  • PatchedSamsung Mobile Devices: Insertion of Sensitive Information Into Log File (CVE-2023-21492)

    Samsung Mobile Devices

    Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization (ASLR) bypass. Added to CISA KEV on 2023-05-19.

    Open incident →CVE-2023-21492