pwn.watch: Samsung incident updates

[high] Samsung Mobile Devices: Mobile Devices Out-of-Bounds Write Vulnerability

Mon, 10 Nov 2025 00:00:00 GMT

Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so. This vulnerability could allow remote attackers to execute arbitrary code. Added to CISA KEV on 2025-11-10.

Status: closed · Patch: patched · Fixed in: See vendor advisory linked in sources

Latest updates:

2025-11-10: CISA added CVE-2025-21042 to the KEV catalog (due 2025-12-01).

CVEs: CVE-2025-21042

[high] Samsung Mobile Devices: Mobile Devices Out-of-Bounds Write Vulnerability

Thu, 02 Oct 2025 00:00:00 GMT

Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so which allows remote attackers to execute arbitrary code. Added to CISA KEV on 2025-10-02.

Status: closed · Patch: patched · Fixed in: See vendor advisory linked in sources

Latest updates:

2025-10-02: CISA added CVE-2025-21043 to the KEV catalog (due 2025-10-23).

CVEs: CVE-2025-21043

[critical] Samsung MagicINFO 9 Server: MagicINFO 9 Server Path Traversal Vulnerability

Thu, 22 May 2025 00:00:00 GMT

Samsung MagicINFO 9 Server contains a path traversal vulnerability that allows an attacker to write arbitrary file as system authority. Added to CISA KEV on 2025-05-22.

Status: closed · Patch: patched · Fixed in: See vendor advisory linked in sources

Latest updates:

2025-05-22: CISA added CVE-2025-4632 to the KEV catalog (due 2025-06-12).

CVEs: CVE-2025-4632

[high] Samsung Mobile Devices: Use-After-Free (CVE-2022-22265)

Mon, 18 Sep 2023 00:00:00 GMT

Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution. Added to CISA KEV on 2023-09-18.

Status: closed · Patch: patched · Fixed in: See vendor advisory linked in sources

Latest updates:

2023-09-18: CISA added CVE-2022-22265 to the KEV catalog (due 2023-10-09).

CVEs: CVE-2022-22265

[medium] Samsung Mobile Devices: Insertion of Sensitive Information Into Log File (CVE-2023-21492)

Fri, 19 May 2023 00:00:00 GMT

Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization (ASLR) bypass. Added to CISA KEV on 2023-05-19.

Status: closed · Patch: patched · Fixed in: See vendor advisory linked in sources

Latest updates:

2023-05-19: CISA added CVE-2023-21492 to the KEV catalog (due 2023-06-09).

CVEs: CVE-2023-21492