Product · KEV exposure
Samsung Mobile Devices known exploited vulnerabilities
We track 13 CVEs in Samsung Mobile Devices. All of them are on CISA's Known Exploited Vulnerabilities catalog, meaning CISA has evidence of exploitation in the wild (listed 2022–2025). The most recent is CVE-2025-21042, added to KEV on .
- CVEs tracked
- 13
- On CISA KEV
- 13
- Ransomware use
- 0
- Rated critical
- 0
Every Samsung Mobile Devices CVE we track
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV | Patch by |
|---|---|---|---|---|---|
| CVE-2025-21042 Samsung Mobile Devices Out-of-Bounds Write Vulnerability | [ HIGH ] | 8.8 | 34.5% | ||
| CVE-2025-21043 Samsung Mobile Devices Out-of-Bounds Write Vulnerability | [ HIGH ] | 8.8 | 2.2% | ||
| CVE-2022-22265 Samsung Mobile Devices Use-After-Free Vulnerability | [ MEDIUM ] | 5.0 | 0.4% | ||
| CVE-2021-25489 Samsung Mobile Devices Improper Input Validation Vulnerability | [ LOW ] | 3.3 | 0.5% | ||
| CVE-2021-25487 Samsung Mobile Devices Out-of-Bounds Read Vulnerability | [ HIGH ] | 7.3 | 0.6% | ||
| CVE-2021-25395 Samsung Mobile Devices Race Condition Vulnerability | [ MEDIUM ] | 6.4 | 0.4% | ||
| CVE-2021-25394 Samsung Mobile Devices Race Condition Vulnerability | [ MEDIUM ] | 6.4 | 0.4% | ||
| CVE-2021-25372 Samsung Mobile Devices Improper Boundary Check Vulnerability | [ MEDIUM ] | 6.1 | 0.8% | ||
| CVE-2021-25371 Samsung Mobile Devices Unspecified Vulnerability | [ MEDIUM ] | 6.1 | 0.8% | ||
| CVE-2023-21492 Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability | [ MEDIUM ] | 4.4 | 2.6% | ||
| CVE-2021-25370 Samsung Mobile Devices Memory Corruption Vulnerability | [ MEDIUM ] | 6.1 | 0.9% | ||
| CVE-2021-25369 Samsung Mobile Devices Improper Access Control Vulnerability | [ MEDIUM ] | 6.2 | 1.1% | ||
| CVE-2021-25337 Samsung Mobile Devices Improper Access Control Vulnerability | [ MEDIUM ] | 4.4 | 2.8% |
Sorted by date added to KEV. Severity and CVSS as stated by NVD or the vendor; EPSS from FIRST.org. "Patch by" is CISA's BOD 22-01 deadline for US federal agencies, a useful priority signal for everyone else. Machine-readable: /api/v1/vendors/samsung.json.
Every row links to its CVE record with the CISA required action, catalog coverage and primary sources. We describe impact and remediation only; no exploit code. See the full KEV tracker or compare KEV catalogs.