{"schema_version":1,"title":"Samsung Android vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 6 vulnerabilities in Samsung Android: 0 in the last 7 days and 1 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-21123, was published on 12 October 2026. 1 vulnerability in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/technologies/samsung-android","json_url":"https://junglewise.ai/threats/technologies/samsung-android.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/samsung-android","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":0,"all_time":6,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":1,"last_365_days":3},"latest":[{"cve":"CVE-2026-21123","epss":0.0014,"slug":"cve-2026-21123-improper-privilege-management-in-locksettings-prior-to-smr-oct","title":"Samsung Locksettings improper privilege management","severity":"info","exploited":false,"published_at":"2026-10-12T05:17:00.867+00:00","url":"https://junglewise.ai/threats/cve-2026-21123-improper-privilege-management-in-locksettings-prior-to-smr-oct"},{"cve":"CVE-2026-21073","cvss":6.1,"epss":0.0021,"slug":"cve-2026-21073-improper-input-validation-in-galaxy-themes-prior-to-smr-aug-2026","title":"Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity.","severity":"medium","exploited":false,"published_at":"2026-08-10T09:17:20.757+00:00","url":"https://junglewise.ai/threats/cve-2026-21073-improper-input-validation-in-galaxy-themes-prior-to-smr-aug-2026"},{"cve":"CVE-2026-21023","cvss":5.5,"epss":0.001,"slug":"cve-2026-21023-insufficient-verification-of-data-authenticity-in","title":"Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local…","severity":"medium","exploited":false,"published_at":"2026-04-29T05:16:04.07+00:00","url":"https://junglewise.ai/threats/cve-2026-21023-insufficient-verification-of-data-authenticity-in"},{"cve":"CVE-2025-21075","cvss":4.3,"epss":0.0028,"slug":"cve-2025-21075-out-of-bounds-write-in-libimagecodec-quram-so-prior-to-smr-nov","title":"Out-of-bounds write in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory.","severity":"medium","exploited":false,"published_at":"2025-11-05T06:15:33.72+00:00","url":"https://junglewise.ai/threats/cve-2025-21075-out-of-bounds-write-in-libimagecodec-quram-so-prior-to-smr-nov"},{"cve":"CVE-2025-21074","cvss":4.3,"epss":0.0029,"slug":"cve-2025-21074-out-of-bounds-read-in-libimagecodec-quram-so-prior-to-smr-nov","title":"Out-of-bounds read in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory.","severity":"medium","exploited":false,"published_at":"2025-11-05T06:15:33.597+00:00","url":"https://junglewise.ai/threats/cve-2025-21074-out-of-bounds-read-in-libimagecodec-quram-so-prior-to-smr-nov"},{"cve":"CVE-2025-21073","cvss":6.8,"epss":0.002,"slug":"cve-2025-21073-insecure-default-configuration-in-usb-connection-mode-prior-to","title":"Insecure default configuration in USB connection mode prior to SMR Nov-2025 Release 1 allows privileged physical…","severity":"medium","exploited":false,"published_at":"2025-11-05T06:15:33.463+00:00","url":"https://junglewise.ai/threats/cve-2025-21073-insecure-default-configuration-in-usb-connection-mode-prior-to"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Samsung Exynos 1380","slug":"exynos-1380","vulnerabilities":37,"url":"https://junglewise.ai/threats/technologies/exynos-1380"},{"name":"Samsung Exynos 1480","slug":"exynos-1480","vulnerabilities":37,"url":"https://junglewise.ai/threats/technologies/exynos-1480"},{"name":"Samsung Exynos 1580","slug":"exynos-1580","vulnerabilities":37,"url":"https://junglewise.ai/threats/technologies/exynos-1580"},{"name":"Samsung Exynos 2400","slug":"exynos-2400","vulnerabilities":33,"url":"https://junglewise.ai/threats/technologies/exynos-2400"},{"name":"Samsung Exynos 1330","slug":"exynos-1330","vulnerabilities":30,"url":"https://junglewise.ai/threats/technologies/exynos-1330"},{"name":"Samsung Escargot","slug":"escargot","vulnerabilities":28,"url":"https://junglewise.ai/threats/technologies/escargot"},{"name":"Samsung Exynos 2500","slug":"exynos-2500","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/exynos-2500"},{"name":"Samsung Exynos 1280","slug":"exynos-1280","vulnerabilities":25,"url":"https://junglewise.ai/threats/technologies/exynos-1280"},{"name":"Samsung Exynos 2200","slug":"exynos-2200","vulnerabilities":20,"url":"https://junglewise.ai/threats/technologies/exynos-2200"},{"name":"Samsung Exynos W920","slug":"exynos-w920","vulnerabilities":19,"url":"https://junglewise.ai/threats/technologies/exynos-w920"},{"name":"Samsung Exynos 850","slug":"exynos-850","vulnerabilities":18,"url":"https://junglewise.ai/threats/technologies/exynos-850"},{"name":"Samsung Exynos W930","slug":"exynos-w930","vulnerabilities":18,"url":"https://junglewise.ai/threats/technologies/exynos-w930"}],"technology":{"hub":true,"name":"Samsung Android","slug":"samsung-android","vendor":{"hub":true,"name":"Samsung","slug":"samsung","url":"https://junglewise.ai/threats/vendors/samsung"},"aliases":[],"category":"os","description":"Mobile operating system developed by Google for smartphones and tablets.","url":"https://junglewise.ai/threats/technologies/samsung-android"},"most_severe":[{"cve":"CVE-2025-21073","cvss":6.8,"epss":0.002,"slug":"cve-2025-21073-insecure-default-configuration-in-usb-connection-mode-prior-to","title":"Insecure default configuration in USB connection mode prior to SMR Nov-2025 Release 1 allows privileged physical…","severity":"medium","exploited":false,"published_at":"2025-11-05T06:15:33.463+00:00","url":"https://junglewise.ai/threats/cve-2025-21073-insecure-default-configuration-in-usb-connection-mode-prior-to"},{"cve":"CVE-2026-21073","cvss":6.1,"epss":0.0021,"slug":"cve-2026-21073-improper-input-validation-in-galaxy-themes-prior-to-smr-aug-2026","title":"Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity.","severity":"medium","exploited":false,"published_at":"2026-08-10T09:17:20.757+00:00","url":"https://junglewise.ai/threats/cve-2026-21073-improper-input-validation-in-galaxy-themes-prior-to-smr-aug-2026"},{"cve":"CVE-2026-21023","cvss":5.5,"epss":0.001,"slug":"cve-2026-21023-insufficient-verification-of-data-authenticity-in","title":"Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local…","severity":"medium","exploited":false,"published_at":"2026-04-29T05:16:04.07+00:00","url":"https://junglewise.ai/threats/cve-2026-21023-insufficient-verification-of-data-authenticity-in"},{"cve":"CVE-2025-21074","cvss":4.3,"epss":0.0029,"slug":"cve-2025-21074-out-of-bounds-read-in-libimagecodec-quram-so-prior-to-smr-nov","title":"Out-of-bounds read in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory.","severity":"medium","exploited":false,"published_at":"2025-11-05T06:15:33.597+00:00","url":"https://junglewise.ai/threats/cve-2025-21074-out-of-bounds-read-in-libimagecodec-quram-so-prior-to-smr-nov"},{"cve":"CVE-2025-21075","cvss":4.3,"epss":0.0028,"slug":"cve-2025-21075-out-of-bounds-write-in-libimagecodec-quram-so-prior-to-smr-nov","title":"Out-of-bounds write in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory.","severity":"medium","exploited":false,"published_at":"2025-11-05T06:15:33.72+00:00","url":"https://junglewise.ai/threats/cve-2025-21075-out-of-bounds-write-in-libimagecodec-quram-so-prior-to-smr-nov"},{"cve":"CVE-2026-21123","epss":0.0014,"slug":"cve-2026-21123-improper-privilege-management-in-locksettings-prior-to-smr-oct","title":"Samsung Locksettings improper privilege management","severity":"info","exploited":false,"published_at":"2026-10-12T05:17:00.867+00:00","url":"https://junglewise.ai/threats/cve-2026-21123-improper-privilege-management-in-locksettings-prior-to-smr-oct"}],"generated_at":"2026-11-12T03:07:00.164048+00:00"}