Samsung

A stack-based buffer overflow exists in the Samsung Exynos 980 firmware's SMS RP-DATA parser, enabling potential zero-click remote code execution on the baseband. A conceptual proof-of-concept (PoC) exploit has been published.

CVE-2026-98260 is a kernel memory corruption vulnerability in the Infinity Core Timer subsystem allowing local privilege escalation to root on Android devices via a use-after-free condition.

Multiple vulnerabilities in Samsung's Android implementation allow remote or local attackers to achieve arbitrary code execution with root privileges, escalate permissions, and cause denial-of-service.

Researchers demonstrated a $50,000 exploit chain utilizing three vulnerabilities in Samsung Members, Samsung Account, and Bixby to achieve remote system-level code execution on flagship Galaxy devices.

Samsung released a security update to address multiple vulnerabilities in Samsung mobile devices running versions prior to SMR-MAY-2026 Release 1, potentially allowing attackers to exploit these vulnerabilities for malicious purposes.

A path traversal vulnerability in Samsung MagicINFO 9 Server could allow an attacker to write arbitrary files with system privileges, potentially leading to code execution or system compromise.