Evidence dossier
CVE-2025-21043
Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.
Exploited in the wild (CISA KEV since Oct 2, 2025). NVD reports CVSS 3.1 9.8. Severity assessments differ within at least one CVSS version. EPSS estimates 1.9% exploit likelihood as of Aug 27, 2026.
67.4–71.4Priority evidence range
As of Aug 27, 2026
Normalized restatement
Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.
- State
- PUBLISHED
- Published
- Sep 12, 2025
- Updated
- Feb 26, 2026
- Evidence coverage
- 87%
Evidence chronology
What was known when
- Source dateSource date omittedFirst observed by CASCACISA-ADPOriginal evidence ↗
Record text: CISA ADP Vulnrichment
Inspect raw assertion
- Field
container- Value
- CISA ADP Vulnrichment
- Source dateSource date omittedFirst observed by CASCASamsungMobileOriginal evidence ↗
Record text: Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.
Inspect raw assertion
- Field
container- Value
- Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.
- Source dateFirst observed by CASCACISA KEVOriginal evidence ↗
Exploitation cataloged: Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Inspect raw assertion
- Field
observed_exploitation- Value
- Samsung Mobile Devices Out-of-Bounds Write Vulnerability
- Source dateFirst observed by CASCAFIRST EPSSOriginal evidence ↗
EPSS score: 1.89% probability · 78.06th percentile
Inspect raw assertion
- Field
model_probability- Value
- Probability 0.018920000000; percentile 0.780620000000
Assessments differ
Values are shown separately by source and CVSS version.
CISA KEV · catalog date Oct 2, 2025 · first observed Jul 19, 2026
FIRST EPSS · score date Aug 27, 2026 · 78.1th percentile · first observed Aug 27, 2026
NVD · CVSS 3.1 · first observed Jul 19, 2026 · values shown separately below
Evidence detail
Source limits and decisions
Why each evidence state has this value
Outside this view’s verified evidenceReason detail begins outside this selected snapshot; the state remains source-bound.
Source comparison
Who said what
CISA-ADPIndependent enrichment
Record text
CISA ADP Vulnrichment
Inspect raw assertion
- Field
container- Value
- CISA ADP Vulnrichment
SamsungMobileOriginal assertion
Record text
Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.
Inspect raw assertion
- Field
container- Value
- Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.
CISA KEVOriginal assertion
Exploitation cataloged
Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Inspect raw assertion
- Field
observed_exploitation- Value
- Samsung Mobile Devices Out-of-Bounds Write Vulnerability
FIRST EPSSOriginal assertion
EPSS score
1.89% probability · 78.06th percentile
Inspect raw assertion
- Field
model_probability- Value
- Probability 0.018920000000; percentile 0.780620000000
Applicability
Cited product scope
103Underlying assertions
1Canonical products
103Target assertions
0Constraint assertions
Grouped from 1 configuration nodes in this exact snapshot. Visual grouping is navigational; asset exposure and root cause require cited evidence.
Identity source boundaries
- Cpe dictionary1,775,266 records · observed through 2026-07-21T06:45:29.809Z
27d65b0f-b718-4b4f-bb79-c47c68d09dfa - Cpe match643,502 records · observed through 2026-07-21T08:13:17.697Z
955dae73-7302-438b-aee1-058d7cc5d48e
2 scope groups
SamsungMobile · source assertedSamsung MobileSamsung Mobile DevicesDirect source scope
Unaffected: SMR Sep-2025 Release in Android 13, 14, 15, 16
Source-reported scopeCanonical linkage remains open; the cited source assertion is retained below.
Inspect raw assertion
[{"status": "unaffected", "version": "SMR Sep-2025 Release in Android 13, 14, 15, 16"}]NVD CPE · OPERATING SYSTEMsamsungandroidVulnerable target · 103 assertions
Version 13.0; Version 14.0; Version 15.0; Version 16.0Canonical identity
Scope supportedproduct-bfc06cdae9e73738e7672364f70046bdc0b0c8dcf806dda71f982d32086f0748Linked exactInspect raw assertions
cpe:2.3:o:samsung:android:13.0:smr-jan-2025-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 20
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
fda1685e-d101-46f6-8857-7f0894e07748
cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 48
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
9cbff102-91a9-4bcc-bb43-912896bfccea
cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 95
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
ab3f31fa-359f-4cb6-9078-cd2093d4c43a
cpe:2.3:o:samsung:android:16.0:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 101
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3fd6766a-ec2b-4ca2-9a8e-2ba5c9e9ecf9
cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 80
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
77ce3494-f7c0-497b-8491-107d31c9a91f
cpe:2.3:o:samsung:android:13.0:smr-mar-2024-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 31
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5697984d-08ba-412f-9bdf-26b658b0adbc
cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 90
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
f7eb9c6e-cf84-4e4d-94d8-39233f8ec4dd
cpe:2.3:o:samsung:android:13.0:smr-may-2022-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 33
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
e4187ba1-226e-4976-a642-2f6dae85538e
cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 84
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
84f3023f-e65c-4871-a65a-738eff64d365
cpe:2.3:o:samsung:android:13.0:smr-jun-2022-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 25
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
9fa72654-2389-4709-bc70-59ec4349a826
cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 18
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
7d7da96d-9c25-4dda-a6bf-d998ac346b89
cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 91
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
852a1bec-438f-4d1e-b361-87bd57d50157
cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 81
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
acea385e-3931-4438-a2a9-0357651f9b48
cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 58
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
df7b3213-520a-49f0-a183-c73a37a56854
cpe:2.3:o:samsung:android:13.0:smr-may-2024-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 35
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
73f22c26-52fc-42a7-b263-0cc7770a8c6a
cpe:2.3:o:samsung:android:13.0:smr-jun-2025-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 28
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
c35b2d31-b8c3-4cc2-9b0a-e4fdc105ac94
cpe:2.3:o:samsung:android:13.0:smr-nov-2024-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 40
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2f5ca412-baaf-4378-8ecd-95a404d4e19b
cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 66
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
c339a665-413d-443f-ad04-f71c161235d0
cpe:2.3:o:samsung:android:13.0:smr-mar-2025-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 32
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
72b97155-e841-4267-9522-a81f8b139a79
cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 2
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
70825981-f895-4bfd-9b6e-92bff0d67023
cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 61
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
fd8b9cd3-063e-481e-be7c-1628ada71849
cpe:2.3:o:samsung:android:13.0:smr-apr-2024-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 3
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
a5e68b7b-ba08-4e8c-b60a-b3836c6986bc
cpe:2.3:o:samsung:android:13.0:smr-feb-2025-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 16
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
39f64baa-2e49-4919-a940-219391383d5e
cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 102
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
c86a3033-9dd1-47f9-b95d-10f82a31d335
cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 77
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
eafe015f-8130-4f10-a553-420f0bb2a132
cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 82
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
a57cb118-46cc-4ce8-acc3-a806cd2c25a9
cpe:2.3:o:samsung:android:13.0:smr-may-2025-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 36
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
7eb4c4ce-7b3c-4573-87cd-28fc67b777fd
cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 53
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
cc6e2fc7-2baf-4c7b-9e0f-d9f844041a35
cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 49
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
dab2a0d7-8f4f-4128-ae09-d2658d793bf7
cpe:2.3:o:samsung:android:13.0:smr-jan-2022-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 17
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
57b125ed-d939-4cbc-9e96-bbcf02402a69
cpe:2.3:o:samsung:android:15.0:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 94
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
95de4e96-2f23-47e5-9dfc-44ec409f37e8
cpe:2.3:o:samsung:android:13.0:smr-aug-2024-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 7
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
6239d93f-ca0e-4120-96a1-fb63276eaee8
cpe:2.3:o:samsung:android:13.0:smr-jan-2024-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 19
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
07ac19c6-d245-4c3a-90cc-a931a901ea0a
cpe:2.3:o:samsung:android:13.0:smr-jul-2024-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 23
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
b6871bc1-19f4-4f0c-88d8-4000590d8d5a
cpe:2.3:o:samsung:android:13.0:smr-dec-2021-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 9
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
cd382e2d-0b51-4908-989a-88e083fc85bf
cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 76
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
31b5b670-acde-4a64-97c5-358d79c65080
cpe:2.3:o:samsung:android:13.0:smr-apr-2025-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 4
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
ac42e785-02bf-4f27-b5cf-49572a2dbc8e
cpe:2.3:o:samsung:android:13.0:smr-feb-2024-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 15
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
952ca843-7cf0-4424-bda4-3f2a93e077b6
cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 73
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
4ecb0b7a-590c-460c-878b-9a78cb37d259
cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 41
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
ebb29f18-a929-432b-b20c-365401e6ca12
cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 70
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
f7dcb465-a0f7-496e-be45-0b5fa1508d93
cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 89
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
931cc6d7-a42d-4482-b901-b539dff89c3e
cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 85
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
6dd1f78d-ea98-4825-a0ea-703196dde5e4
cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 10
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
299284da-85ab-4162-b858-e67e5c6c14f7
cpe:2.3:o:samsung:android:13.0:smr-sep-2022-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 44
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
4c17a088-2ca1-4818-940f-2fefa881d598
cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 55
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
26eef3ec-643f-4a39-8f4c-11f0f534b589
cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 75
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
427a79d5-04e9-46bc-9d8c-471ebd28aaaa
cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 78
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
141e541b-8fa5-4829-a413-4f1dc19e9ae1
cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 56
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
0501033a-0d51-41e8-91a9-e72b6ee3f78d
cpe:2.3:o:samsung:android:13.0:smr-jun-2024-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 27
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
e346dcbd-7deb-464f-b917-8624be87d646
cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 51
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3f58acb0-ba2b-4afe-91dc-32cbd70dfd73
cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 79
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
ffca253f-ee13-4c52-8cb7-d72c117576d0
cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 71
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
52efd2ca-22e5-4b7a-ac7e-8f86a3c52f5c
cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 62
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
12c17130-a0c0-49e1-8525-9d65f0275270
cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 86
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
bddb3fbe-99ec-4763-961b-2c436d864a1a
cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 87
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
b5746517-d8ff-4819-9b98-d06b475c6cdf
cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 72
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
6d65c03e-7bc3-491a-8621-a8c93fba0a69
cpe:2.3:o:samsung:android:13.0:smr-sep-2024-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 46
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
1dd187e2-2655-407d-87f9-135a9d45f783
cpe:2.3:o:samsung:android:13.0:smr-aug-2025-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 8
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
25f19d02-1ffc-48af-9cb8-063c459e7a4b
cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 99
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
fc6e2318-bd4e-4540-82c3-0d461c691119
cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 60
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
30f706f3-34f6-4d43-ae5e-c202c700a333
cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 50
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
6a89ae5b-4d1a-4ada-b572-38b1fc4ed54c
cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 14
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
d98f307e-3b01-4c17-86e5-1c6299919417
cpe:2.3:o:samsung:android:13.0:smr-nov-2021-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 37
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
bfb2b338-5e04-4136-939f-749a3b163656
cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 100
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
ddfc99bc-87ac-43ac-b815-36b7960c39d1
cpe:2.3:o:samsung:android:13.0:smr-jul-2022-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 21
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
df85aa7b-e1c7-4946-92b4-e4d545caacdf
cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 26
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
85e4e8c1-749f-4a1c-8333-6bafbf8b64d1
cpe:2.3:o:samsung:android:13.0:smr-jul-2025-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 24
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
4684df1e-b783-4c81-a3d0-d09ad2610866
cpe:2.3:o:samsung:android:13.0:smr-aug-2022-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 5
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
0af1eda0-2712-4c3c-8d8a-89e154bb63df
cpe:2.3:o:samsung:android:13.0:smr-feb-2022-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 13
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
61d507c0-086b-4139-a560-126964dfa579
cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 38
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
d2b24866-2b3a-4a1a-8b75-ef7a7541797a
cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 57
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2a901efe-90ba-474c-88d2-8a3e7d99c0e7
cpe:2.3:o:samsung:android:13.0:smr-mar-2022-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 29
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
79c89a24-b07f-43d2-ae83-8f4f03d6c114
cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 59
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
9ab6398c-6a3e-4146-9a5c-595be36047ba
cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 97
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
b9badd79-26fc-4498-afec-c79af6b96924
cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 63
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
e010edc6-d78e-4126-92b0-2f6a10de76ac
cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 22
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
34114ddc-dcda-4306-8d23-2e628873171f
cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 39
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3d30c02c-91fb-4d29-af49-7903158e8feb
cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 96
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
4207b265-009b-4ff8-85c5-01ebdb7701ff
cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 69
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3dd61eda-98ed-4309-b54f-0cf8b7d07dc7
cpe:2.3:o:samsung:android:13.0:smr-oct-2024-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 43
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
c908a5b3-c47b-4da1-a62f-f8fd77ff960d
cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 45
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
c581b7ee-cd08-4d6e-8858-ea8fa631f84c
cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 42
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2b6d9064-844b-4d3f-aae4-d170df45ef8d
cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 65
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
9ce09ef7-b024-4d79-9400-c8223cdfbb86
cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 74
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
d66cf415-6c4a-4af3-b660-b2e9cf484b51
cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 67
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
eb47786e-68ab-4ff1-b9d9-925d65702e4b
cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 88
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
1b02110e-71fb-495f-86ca-f2a4e55c0e42
cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 68
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
213ac4d5-3b95-4120-b72d-a9327bade2bc
cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 92
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
84ed2366-d4ba-4094-94ac-ad6e7aebb6ff
cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 0
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
a123edb1-3048-44b0-8d4d-39a2b24b5f6b
cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 11
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
38b7ab56-ab65-4557-a91c-40ca2fd12351
cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 93
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
abfe99dc-4495-4d4f-80d4-c29a1d22a9c5
cpe:2.3:o:samsung:android:13.0:smr-dec-2024-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 12
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
858b0736-2272-4d5a-a77f-47023d21f7d0
cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 30
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5f73d594-178f-4fc8-9f40-0e545e2647b0
cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 52
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
401980a7-e64a-4773-83eb-c93b50ae0f73
cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 98
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3a695eee-b9de-4448-bc51-af5ac592aa59
cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 54
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
6e12ab0b-728a-4478-b237-78cbaa2a44c5
cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 47
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3093f6fe-c562-4f62-97b7-ca0d2ddf9bbe
cpe:2.3:o:samsung:android:13.0:smr-apr-2022-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 1
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
bde4d65e-8f9b-4810-aed6-95564a97d741
cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 34
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3f3ef3f1-4e54-46e3-a308-69656a29fbd2
cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 64
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
4faa7790-a323-4eca-834e-f19e59c571f5
cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 6
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
88dc0a82-caf3-4e88-8a4d-8af79d0c226d
cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 83
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
cefe0612-fa2e-4629-ae05-33245f1282fe
Affected-product evidence
Accepted scope and product mapping
0 canonical links · 0 source-reported links
Applicability remains source-scoped; safety and exposure remain unassessed.
Assessments
CVSS by origin
NVDCVSS 3.1 · role Primary · priority eligiblevalid_match
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hmobile.security@samsung.comCVSS 3.1 · role Secondary · priority eligiblevalid_match
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HSamsungMobileCVSS 3.1 · role unknown · display onlyDirect record assessment retained outside normalized eligibility
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HEvidence boundaries
- KEV membership is authoritative for the catalog, not proof of exposure in any environment.
- EPSS is a dated model probability and not an individual-environment prediction.
- Affected or fixed status applies only to the exact cited product and version scope; remaining scope stays source-scoped.
- NVD-carried upstream facts remain derivative; independent corroboration requires a separately authored source.
- Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
- NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
- Affected-product evidence remains source-scoped; canonical linkage is required before applicability scoring.
- Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.
- OSV aggregation and OSV-converted NVD material are not independent corroboration.
- Red Hat facts are vendor assertions for the exact supplied products.
- Nonmembership and not-yet-observed states are not proof of safety.