Skip to main content

Samsung security briefs

3 published alerts for Samsung products and services.

Actively exploited (KEV)

CVE-2024-7399

Samsung MagicINFO 9 Server Path Traversal Vulnerability

Samsung MagicINFO 9 Server is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2024-7399). Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to write arbitrary files as system authority. CISA remediation due date: 2026-05-08. If you need help checking exposure, call (864) 335-9223.

Actively exploited (KEV)

CVE-2025-21042

Samsung Mobile Devices Out-of-Bounds Write Vulnerability

Samsung Mobile Devices is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2025-21042). Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so. This vulnerability could allow remote attackers to execute arbitrary code. CISA remediation due date: 2025-12-01. If you need help checking exposure, call (864) 335-9223.

Actively exploited (KEV)

CVE-2025-21043

Samsung Mobile Devices Out-of-Bounds Write Vulnerability

Samsung Mobile Devices is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2025-21043). Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so which allows remote attackers to execute arbitrary code. CISA remediation due date: 2025-10-23. If you need help checking exposure, call (864) 335-9223.