Samsung: Security Vulnerabilities
Out-of-bounds read in decoding frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.
CVSS Score
5.5
EPSS Score
0.001
Published
2025-07-08
Out-of-bounds read in decoding malformed frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.
CVSS Score
5.5
EPSS Score
0.001
Published
2025-07-08
Incorrect default permission in Framework for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to reset some configuration of Galaxy Watch.
CVSS Score
6.2
EPSS Score
0.001
Published
2025-07-08
Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number.
CVSS Score
5.5
EPSS Score
0.001
Published
2025-07-08
Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025 Release 1 allows secondary users to access owner's saved Wi-Fi password.
CVSS Score
4.1
EPSS Score
0.002
Published
2025-07-08
Improper privilege management in Bluetooth prior to SMR Jul-2025 Release 1 allows local attackers to enable Bluetooth.
CVSS Score
6.2
EPSS Score
0.001
Published
2025-07-08
Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to stop broadcasting Auracast.
CVSS Score
6.2
EPSS Score
0.001
Published
2025-07-08
Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to manipulate broadcasting Auracast.
CVSS Score
6.2
EPSS Score
0.001
Published
2025-07-08
Insecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows local attackers to access sensitive information.
CVSS Score
4.0
EPSS Score
0.001
Published
2025-07-08
Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to power off the device.
CVSS Score
6.2
EPSS Score
0.001
Published
2025-07-08