ZeusQA
Start free

Known exploited vulnerabilities

Samsung vulnerabilities attackers have used

Every Samsung vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 15 Samsung vulnerabilities as exploited in the wild, 1 of them added in the last 12 months. The most recent is CVE-2024-7399, added Apr 24, 2026. Mobile Devices has the most entries (13).

In KEV, all time
15
Added, last 12 months
1
Used in ransomware
0
New CVEs this week
0

By product

Mobile Devices (13), MagicINFO 9 Server (2).

Every Samsung entry in CISA KEV

  1. CVE-2024-7399

    Added · due

    Samsung MagicINFO 9 Server Path Traversal Vulnerability

    Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to write arbitrary files as system authority.

  2. CVE-2025-21042

    Added · due

    Samsung Mobile Devices Out-of-Bounds Write Vulnerability

    Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so. This vulnerability could allow remote attackers to execute arbitrary code.

  3. CVE-2025-21043

    Added · due

    Samsung Mobile Devices Out-of-Bounds Write Vulnerability

    Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so which allows remote attackers to execute arbitrary code.

  4. CVE-2025-4632

    Added · due

    Samsung MagicINFO 9 Server Path Traversal Vulnerability

    Samsung MagicINFO 9 Server contains a path traversal vulnerability that allows an attacker to write arbitrary file as system authority.

  5. CVE-2022-22265

    Added · due

    Samsung Mobile Devices Use-After-Free Vulnerability

    Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution.

  6. CVE-2021-25489

    Added · due

    Samsung Mobile Devices Improper Input Validation Vulnerability

    Samsung mobile devices contain an improper input validation vulnerability within the modem interface driver that results in a format string bug leading to kernel panic.

  7. CVE-2021-25487

    Added · due

    Samsung Mobile Devices Out-of-Bounds Read Vulnerability

    Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a buffer in set_skb_priv(), leading to remote code execution by dereference of an invalid function…

  8. CVE-2021-25395

    Added · due

    Samsung Mobile Devices Race Condition Vulnerability

    Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.

  9. CVE-2021-25394

    Added · due

    Samsung Mobile Devices Race Condition Vulnerability

    Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.

  10. CVE-2021-25372

    Added · due

    Samsung Mobile Devices Improper Boundary Check Vulnerability

    Samsung mobile devices contain an improper boundary check vulnerability within DSP driver that allows for out-of-bounds memory access.

  11. CVE-2021-25371

    Added · due

    Samsung Mobile Devices Unspecified Vulnerability

    Samsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP.

  12. CVE-2023-21492

    Added · due

    Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability

    Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization (ASLR) bypass.

  13. CVE-2021-25370

    Added · due

    Samsung Mobile Devices Memory Corruption Vulnerability

    Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with…

  14. CVE-2021-25369

    Added · due

    Samsung Mobile Devices Improper Access Control Vulnerability

    Samsung mobile devices using Mali GPU contains an improper access control vulnerability in sec_log file. Exploitation of the vulnerability exposes sensitive kernel information to the userspace. This vulnerability was chained with…

  15. CVE-2021-25337

    Added · due

    Samsung Mobile Devices Improper Access Control Vulnerability

    Samsung mobile devices contain an improper access control vulnerability in clipboard service which allows untrusted applications to read or write arbitrary files. This vulnerability was chained with CVE-2021-25369 and CVE-2021-25370.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works