{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T22:28:51.438Z",
  "tag": {
    "id": "samsung",
    "label": "Samsung",
    "isStack": false,
    "url": "https://pwn.watch/t/samsung",
    "feed": "https://pwn.watch/t/samsung/feed.xml"
  },
  "counts": {
    "incidents": 5,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 5
  },
  "incidents": [
    {
      "slug": "samsung-mobile-devices-cve-2025-21042",
      "title": "Samsung Mobile Devices: Mobile Devices Out-of-Bounds Write Vulnerability",
      "url": "https://pwn.watch/i/samsung-mobile-devices-cve-2025-21042",
      "json": "https://pwn.watch/i/samsung-mobile-devices-cve-2025-21042.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Samsung Mobile Devices",
      "tags": [
        "samsung",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-21042"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-11-10",
      "closedAt": "2025-11-10",
      "updatedAt": "2025-11-10",
      "summary": "Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so. This vulnerability could allow remote attackers to execute arbitrary code. Added to CISA KEV on 2025-11-10.",
      "xPost": null
    },
    {
      "slug": "samsung-mobile-devices-cve-2025-21043",
      "title": "Samsung Mobile Devices: Mobile Devices Out-of-Bounds Write Vulnerability",
      "url": "https://pwn.watch/i/samsung-mobile-devices-cve-2025-21043",
      "json": "https://pwn.watch/i/samsung-mobile-devices-cve-2025-21043.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Samsung Mobile Devices",
      "tags": [
        "samsung",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-21043"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-10-02",
      "closedAt": "2025-10-02",
      "updatedAt": "2025-10-02",
      "summary": "Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so which allows remote attackers to execute arbitrary code. Added to CISA KEV on 2025-10-02.",
      "xPost": null
    },
    {
      "slug": "samsung-magicinfo-9-server-cve-2025-4632",
      "title": "Samsung MagicINFO 9 Server: MagicINFO 9 Server Path Traversal Vulnerability",
      "url": "https://pwn.watch/i/samsung-magicinfo-9-server-cve-2025-4632",
      "json": "https://pwn.watch/i/samsung-magicinfo-9-server-cve-2025-4632.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Samsung MagicINFO 9 Server",
      "tags": [
        "samsung",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-4632"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-05-22",
      "closedAt": "2025-05-22",
      "updatedAt": "2025-05-22",
      "summary": "Samsung MagicINFO 9 Server contains a path traversal vulnerability that allows an attacker to write arbitrary file as system authority. Added to CISA KEV on 2025-05-22.",
      "xPost": null
    },
    {
      "slug": "samsung-mobile-devices-cve-2022-22265",
      "title": "Samsung Mobile Devices: Use-After-Free (CVE-2022-22265)",
      "url": "https://pwn.watch/i/samsung-mobile-devices-cve-2022-22265",
      "json": "https://pwn.watch/i/samsung-mobile-devices-cve-2022-22265.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Samsung Mobile Devices",
      "tags": [
        "samsung",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2022-22265"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-09-18",
      "closedAt": "2023-09-18",
      "updatedAt": "2023-09-18",
      "summary": "Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution. Added to CISA KEV on 2023-09-18.",
      "xPost": null
    },
    {
      "slug": "samsung-mobile-devices-cve-2023-21492",
      "title": "Samsung Mobile Devices: Insertion of Sensitive Information Into Log File (CVE-2023-21492)",
      "url": "https://pwn.watch/i/samsung-mobile-devices-cve-2023-21492",
      "json": "https://pwn.watch/i/samsung-mobile-devices-cve-2023-21492.json",
      "status": "closed",
      "severity": "medium",
      "patchStatus": "patched",
      "product": "Samsung Mobile Devices",
      "tags": [
        "samsung",
        "android",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2023-21492"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-05-19",
      "closedAt": "2023-05-19",
      "updatedAt": "2023-05-19",
      "summary": "Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization (ASLR) bypass. Added to CISA KEV on 2023-05-19.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "samsung-mobile-devices-cve-2025-21042",
      "incidentTitle": "Samsung Mobile Devices: Mobile Devices Out-of-Bounds Write Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-11-10",
      "title": "CISA added CVE-2025-21042 to the KEV catalog (due 2025-12-01).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/samsung-mobile-devices-cve-2025-21042"
    },
    {
      "incident": "samsung-mobile-devices-cve-2025-21043",
      "incidentTitle": "Samsung Mobile Devices: Mobile Devices Out-of-Bounds Write Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-10-02",
      "title": "CISA added CVE-2025-21043 to the KEV catalog (due 2025-10-23).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/samsung-mobile-devices-cve-2025-21043"
    },
    {
      "incident": "samsung-magicinfo-9-server-cve-2025-4632",
      "incidentTitle": "Samsung MagicINFO 9 Server: MagicINFO 9 Server Path Traversal Vulnerability",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-05-22",
      "title": "CISA added CVE-2025-4632 to the KEV catalog (due 2025-06-12).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/samsung-magicinfo-9-server-cve-2025-4632"
    },
    {
      "incident": "samsung-mobile-devices-cve-2022-22265",
      "incidentTitle": "Samsung Mobile Devices: Use-After-Free (CVE-2022-22265)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-09-18",
      "title": "CISA added CVE-2022-22265 to the KEV catalog (due 2023-10-09).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/samsung-mobile-devices-cve-2022-22265"
    },
    {
      "incident": "samsung-mobile-devices-cve-2023-21492",
      "incidentTitle": "Samsung Mobile Devices: Insertion of Sensitive Information Into Log File (CVE-2023-21492)",
      "severity": "medium",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-05-19",
      "title": "CISA added CVE-2023-21492 to the KEV catalog (due 2023-06-09).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/samsung-mobile-devices-cve-2023-21492"
    }
  ]
}