Samsung: >> Android >> 16.0 Security Vulnerabilities
Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory.
CVSS Score
6.1
EPSS Score
0.002
Published
2026-09-09
Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
CVSS Score
9.2
EPSS Score
0.005
Published
2026-09-09
Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
CVSS Score
9.2
EPSS Score
0.005
Published
2026-09-09
Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity.
CVSS Score
4.6
EPSS Score
0.001
Published
2026-09-09
Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVSS Score
8.4
EPSS Score
0.001
Published
2026-09-09
Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege.
CVSS Score
8.6
EPSS Score
0.001
Published
2026-09-09
Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVSS Score
6.9
EPSS Score
0.001
Published
2026-09-09
Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVSS Score
6.9
EPSS Score
0.001
Published
2026-09-09
Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code.
CVSS Score
8.4
EPSS Score
0.001
Published
2026-08-10
Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVSS Score
5.1
EPSS Score
0.001
Published
2026-08-10