Loading story…
Samsung released its August 2026 Security Maintenance Release for Galaxy smartphones and tablets, patching 56 vulnerabilities across supported devices running Android 14, 15, and 16. The update incorporates 38 fixes from Google’s August Android Security Bulletin and 18 Samsung-specific patches affecting One UI and Galaxy software, with Google’s share including eight critical and 30 high-severity issues.
Samsung said the device-specific fixes address components including SemClipboardService, Samsung Contacts, Dialer, Messages, Galaxy Themes, AppLock, media codecs, and the Weaver hardware component. The company also noted that nine vulnerabilities listed by Google were not included in the Galaxy update because one had already been fixed in July and eight did not affect Samsung devices due to unused hardware or configurations; rollout is expected to begin with newer flagship models before expanding to older supported Galaxy and A-series devices, while national CERT advisories have also flagged Samsung product vulnerabilities.
See affected versions and whether adversaries are exploiting it.
2 events from the most recent confirmed update back to the earliest known activity.
Samsung released details of its August 2026 Security Maintenance Release for Galaxy smartphones and tablets, addressing 56 vulnerabilities across supported devices running Android 14, 15, and 16. The update includes 38 fixes from Google's August Android bulletin and 18 Samsung-specific patches affecting components such as SemClipboardService, Contacts, Dialer, Messages, Themes, AppLock, media codecs, and Weaver.
CERT-PY published an advisory about vulnerabilities affecting Samsung products. The provided reference includes the advisory's existence but no further event details in the supplied content.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
3 references tracked. Mallory keeps watching after this page renders.
cvefeed.io
Open sourcetechrepublic.com
Open sourcecert.gov.py
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Samsung’s September 2026 security update fixes two critical remote-code-execution vulnerabilities in Galaxy devices: `CVE-2026-21095` and `CVE-2026-21096`. The flaws are heap-based buffer overflows in the DNG and JPG decoders within `libimagecodec.quram.so`; successful exploitation could allow an attacker to execute arbitrary code remotely through a crafted image. The bulletin also incorporates applicable Android security fixes, including 18 critical and 40 high-severity issues reported by Google, plus 31 Samsung-specific fixes. Samsung says 40 of the Google-listed vulnerabilities do not affect Galaxy products. Updates cover supported devices running Android 14 through Android 17, though availability varies by device model, carrier, and region.
Sep 9, 2026
Samsung disclosed multiple vulnerabilities affecting Galaxy devices, including **remote code execution** flaws in the proprietary Quram image codec and a separate **improper access control** bug in the Routines automation feature. **CVE-2025-21042** and **CVE-2025-21043** are out-of-bounds write issues in `libimagecodec.quram.so` that can be triggered by specially crafted images delivered through MMS, email attachments, messaging apps, or web content, potentially with little or no user interaction. Samsung said **CVE-2025-21042** was fixed in the **April 2025 Security Maintenance Release**, while **CVE-2025-21043** was addressed in the **September 2025 SMR**. The disclosures revive longstanding concerns around Samsung’s proprietary image parsing stack, which Google Project Zero previously showed could be exploited through malformed Qmage images in a **zero-click MMS** chain that achieved code execution on a Galaxy Note 10+. Samsung also patched **CVE-2025-21058**, which allowed a local attacker on Android 15 and 16 devices to execute arbitrary code with **SystemUI privileges** via Galaxy Routines before versions **4.8.7.1** and **4.9.6.0**. Separately, Google fixed Android framework flaw **CVE-2025-32322** in the September 2025 Android Security Bulletin after it was found to let a malicious app bypass the MediaProjection consent dialog and silently capture screen content on Android 13 and 14.
Jun 29, 2026
Google’s September 2026 Android Security Bulletin fixes more than 90 vulnerabilities affecting Android 14, 15, 16, 16 QPR2, and 17. The release rates 26 flaws as **critical** and 68 as high severity, including Android System remote-code-execution vulnerabilities that can be triggered without user interaction or additional execution privileges, depending on the affected CVE. It also addresses critical elevation-of-privilege and denial-of-service issues in the Framework and System, a critical Transparent Inter-Process Communication kernel-component RCE flaw, and defects in kernel, Android TV, and vendor components. Google is distributing patch levels `2026-09-01` and `2026-09-05`; devices at the latter level receive all applicable September fixes, including relevant kernel and vendor patches. Pixel and Samsung Galaxy devices are among the first receiving updates, while availability for other manufacturers may lag. Qualcomm separately released fixes for 14 high-severity vulnerabilities in software used by its mobile, wireless-connectivity, automotive, and computing platforms, which could expose confidential information or disrupt affected services. No active exploitation was reported at publication, but organizations should prioritize deployment of available Android and vendor updates.
Sep 9, 2026