CVE-2015-8039: Samsung Smartviewer

Medium severity, CVSS 6.8. EPSS: 3.9% chance of exploitation in the next 30 days.

Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors to the (1) DVRSetupSave method in the STWAxConfig control or (2) SendCustomPacket method in the STWAxConfigNVR control, which trigger an untrusted pointer dereference.

Affected products

• Samsung Smartviewer: affected versions not specified

Published 2015-11-02. Last modified 2026-06-17.