Samsung vulnerabilities in CISA KEV
Samsung has 15 vulnerabilities in CISA's catalogue of flaws known to be exploited, the 18th highest of any vendor. 2 were added in the last 12 months; none are linked to known ransomware use (0% of its entries, against 20.4% across the catalogue). CISA's median fix window for these entries is 21 days (range 14 to 21), against 21 days (range 1 to 184) across the whole catalogue. The most exploited product is Mobile Devices, with 13 entries. Other frequently affected products: MagicINFO 9 Server (2).
Catalog v2026.11.04, released 5 Nov 2026. Source CISA ↗. All KEV entries.
$ ./kev --vendor samsung --summary
Counts are computed from the catalog release on ; the 12 month window ends there.
┌─ total entries
15
in CISA KEV
┌─ first added
2022-11-08
earliest entry
┌─ latest added
2026-04-24
most recent entry
┌─ last 12 months
2
entries added
┌─ ransomware use
0 of 15
0% linked to ransomware
┌─ distinct products
2
affected products
$ awk -F, {print $1} /var/log/kev/samsung.log | uniq -c
Entries by the year CISA added them.
| Year | Entries added | Of which ransomware |
|---|---|---|
| 2022 | 3 | 0 |
| 2023 | 8 | 0 |
| 2025 | 3 | 0 |
| 2026 | 1 | 0 |
$ sort /var/log/kev/samsung.log | uniq -c | sort -rn | head -5
The five products with the most entries in the catalogue.
- Mobile Devices 13 entries
- MagicINFO 9 Server 2 entries
$ kev-due-dates --vendor samsung
Days between the date CISA added an entry and the due date it set, median and range. Due dates apply to US federal agencies; for everyone else they are a patch-first ranking signal.
┌─ Samsung
21 days (range 14 to 21)
median and range in days
┌─ whole catalogue
21 days (range 1 to 184)
median and range in days
$ grep -o 'CWE-[0-9]*' /var/log/kev/samsung.log | sort | uniq -c | sort -rn | head -3
Weakness types CISA records for these entries (15 of 15 have at least one CWE).
$ grep -ril 'Samsung' /var/log/news | head -5
Our reporting that names Samsung or one of its KEV CVE ids, newest first.
┌─ /var/log/news
Patch Week pages with these entries
No Patch Week page covers this vendor yet.
$ wc -l ./samsung.kev · 15 rows
Descriptions: CISA Known Exploited Vulnerabilities catalogue
- CVE-2024-7399
MagicINFO 9 Server
Samsung MagicINFO 9 Server Path Traversal Vulnerability
due 2026-05-08 · CWE-22 CWE-434
$ cat CVE-2024-7399.txt
Description. Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to write arbitrary files as system authority.
Required action. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- CVE-2025-21042
Mobile Devices
Samsung Mobile Devices Out-of-Bounds Write Vulnerability
due 2025-12-01 · CWE-787
$ cat CVE-2025-21042.txt
Description. Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so. This vulnerability could allow remote attackers to execute arbitrary code.
Required action. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- CVE-2025-21043
Mobile Devices
Samsung Mobile Devices Out-of-Bounds Write Vulnerability
due 2025-10-23 · CWE-787
$ cat CVE-2025-21043.txt
Description. Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so which allows remote attackers to execute arbitrary code.
Required action. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- CVE-2025-4632
MagicINFO 9 Server
Samsung MagicINFO 9 Server Path Traversal Vulnerability
due 2025-06-12 · CWE-22
$ cat CVE-2025-4632.txt
Description. Samsung MagicINFO 9 Server contains a path traversal vulnerability that allows an attacker to write arbitrary file as system authority.
Required action. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- CVE-2022-22265
Mobile Devices
Samsung Mobile Devices Use-After-Free Vulnerability
due 2023-10-09 · CWE-703
$ cat CVE-2022-22265.txt
Description. Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution.
Required action. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CVE-2021-25371
Mobile Devices
Samsung Mobile Devices Unspecified Vulnerability
due 2023-07-20 · CWE-912
$ cat CVE-2021-25371.txt
Description. Samsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP.
Required action. Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
- CVE-2021-25372
Mobile Devices
Samsung Mobile Devices Improper Boundary Check Vulnerability
due 2023-07-20 · CWE-787
$ cat CVE-2021-25372.txt
Description. Samsung mobile devices contain an improper boundary check vulnerability within DSP driver that allows for out-of-bounds memory access.
Required action. Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
- CVE-2021-25394
Mobile Devices
Samsung Mobile Devices Race Condition Vulnerability
due 2023-07-20 · CWE-416
$ cat CVE-2021-25394.txt
Description. Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.
Required action. Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
- CVE-2021-25395
Mobile Devices
Samsung Mobile Devices Race Condition Vulnerability
due 2023-07-20 · CWE-362
$ cat CVE-2021-25395.txt
Description. Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.
Required action. Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
- CVE-2021-25487
Mobile Devices
Samsung Mobile Devices Out-of-Bounds Read Vulnerability
due 2023-07-20 · CWE-125
$ cat CVE-2021-25487.txt
Description. Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a buffer in set_skb_priv(), leading to remote code execution by dereference of an invalid function pointer.
Required action. Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
- CVE-2021-25489
Mobile Devices
Samsung Mobile Devices Improper Input Validation Vulnerability
due 2023-07-20 · CWE-20
$ cat CVE-2021-25489.txt
Description. Samsung mobile devices contain an improper input validation vulnerability within the modem interface driver that results in a format string bug leading to kernel panic.
Required action. Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
- CVE-2023-21492
Mobile Devices
Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
due 2023-06-09 · CWE-532
$ cat CVE-2023-21492.txt
Description. Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization (ASLR) bypass.
Required action. Apply updates per vendor instructions.
- CVE-2021-25337
Mobile Devices
Samsung Mobile Devices Improper Access Control Vulnerability
due 2022-11-29 · CWE-269
$ cat CVE-2021-25337.txt
Description. Samsung mobile devices contain an improper access control vulnerability in clipboard service which allows untrusted applications to read or write arbitrary files. This vulnerability was chained with CVE-2021-25369 and CVE-2021-25370.
Required action. Apply updates per vendor instructions.
- CVE-2021-25369
Mobile Devices
Samsung Mobile Devices Improper Access Control Vulnerability
due 2022-11-29 · CWE-200
$ cat CVE-2021-25369.txt
Description. Samsung mobile devices using Mali GPU contains an improper access control vulnerability in sec_log file. Exploitation of the vulnerability exposes sensitive kernel information to the userspace. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25370.
Required action. Apply updates per vendor instructions.
- CVE-2021-25370
Mobile Devices
Samsung Mobile Devices Memory Corruption Vulnerability
due 2022-11-29 · CWE-416
$ cat CVE-2021-25370.txt
Description. Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369.
Required action. Apply updates per vendor instructions.