CVE-2024-7399 — Samsung MagicINFO 9 Server Path Traversal Vulnerability
Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to write arbitrary files as system authority.
MagicINFO 9 Server · Apr 24, 2026
CISA Known Exploited Vulnerabilities Directory
Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2024-7399 — Samsung MagicINFO 9 Server Path Traversal Vulnerability
Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to write arbitrary files as system authority.
|
Samsung | MagicINFO 9 Server | Apr 24, 2026 | May 8, 2026 | |
|
CVE-2025-21042 — Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so. This vulnerability could allow remote attackers to execute arbitrary code.
|
Samsung | Mobile Devices | Nov 10, 2025 | Dec 1, 2025 | |
|
CVE-2025-21043 — Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so which allows remote attackers to execute arbitrary code.
|
Samsung | Mobile Devices | Oct 2, 2025 | Oct 23, 2025 | |
|
CVE-2025-4632 — Samsung MagicINFO 9 Server Path Traversal Vulnerability
Samsung MagicINFO 9 Server contains a path traversal vulnerability that allows an attacker to write arbitrary file as system authority.
|
Samsung | MagicINFO 9 Server | May 22, 2025 | Jun 12, 2025 | |
|
CVE-2022-22265 — Samsung Mobile Devices Use-After-Free Vulnerability
Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution.
|
Samsung | Mobile Devices | Sep 18, 2023 | Oct 9, 2023 | |
|
CVE-2021-25371 — Samsung Mobile Devices Unspecified Vulnerability
Samsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP.
|
Samsung | Mobile Devices | Jun 29, 2023 | Jul 20, 2023 | |
|
CVE-2021-25372 — Samsung Mobile Devices Improper Boundary Check Vulnerability
Samsung mobile devices contain an improper boundary check vulnerability within DSP driver that allows for out-of-bounds memory access.
|
Samsung | Mobile Devices | Jun 29, 2023 | Jul 20, 2023 | |
|
CVE-2021-25394 — Samsung Mobile Devices Race Condition Vulnerability
Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.
|
Samsung | Mobile Devices | Jun 29, 2023 | Jul 20, 2023 | |
|
CVE-2021-25395 — Samsung Mobile Devices Race Condition Vulnerability
Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.
|
Samsung | Mobile Devices | Jun 29, 2023 | Jul 20, 2023 | |
|
CVE-2021-25487 — Samsung Mobile Devices Out-of-Bounds Read Vulnerability
Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a buffer in set_skb_priv(), leading to remote code execution by dereference of an invalid function pointer.
|
Samsung | Mobile Devices | Jun 29, 2023 | Jul 20, 2023 |
CVE-2025-21042 — Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so. This vulnerability could allow remote attackers to execute arbitrary code.
Mobile Devices · Nov 10, 2025
CVE-2025-21043 — Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so which allows remote attackers to execute arbitrary code.
Mobile Devices · Oct 2, 2025
CVE-2025-4632 — Samsung MagicINFO 9 Server Path Traversal Vulnerability
Samsung MagicINFO 9 Server contains a path traversal vulnerability that allows an attacker to write arbitrary file as system authority.
MagicINFO 9 Server · May 22, 2025
CVE-2022-22265 — Samsung Mobile Devices Use-After-Free Vulnerability
Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution.
Mobile Devices · Sep 18, 2023
CVE-2021-25371 — Samsung Mobile Devices Unspecified Vulnerability
Samsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP.
Mobile Devices · Jun 29, 2023
CVE-2021-25372 — Samsung Mobile Devices Improper Boundary Check Vulnerability
Samsung mobile devices contain an improper boundary check vulnerability within DSP driver that allows for out-of-bounds memory access.
Mobile Devices · Jun 29, 2023
CVE-2021-25394 — Samsung Mobile Devices Race Condition Vulnerability
Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.
Mobile Devices · Jun 29, 2023
CVE-2021-25395 — Samsung Mobile Devices Race Condition Vulnerability
Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.
Mobile Devices · Jun 29, 2023
CVE-2021-25487 — Samsung Mobile Devices Out-of-Bounds Read Vulnerability
Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a buffer in set_skb_priv(), leading to remote code execution by dereference of an invalid function pointer.
Mobile Devices · Jun 29, 2023