Samsung Camera vulnerabilities

6 CVEs affecting Samsung Camera, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-21014, published 2026-04-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-33712, published 2022-07-12. Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days. Intent redirection vulnerability using implict intent in Camera prior to versions 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Android S(12) allows attacker to get sensitive information.
CVE-2022-23998, published 2022-02-11. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. Improper access control vulnerability in Camera prior to versions 11.1.02.16 in Android R(11), 10.5.03.77 in Android Q(10) and 9.0.6.68 in Android P(9) allows untrusted applications to take a picture…
CVE-2023-21482, published 2025-09-03. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. Missing authorization vulnerability in Camera prior to versions 11.1.02.18 in Android 11, 12.1.03.8 in Android 12 and 13.1.01.4 in Android 13 allows physical attackers to install package through…
CVE-2023-30730, published 2023-09-06. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Implicit intent hijacking vulnerability in Camera prior to versions 11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 12.1.03.10 in Android 12, and 13.0.01.43, 13.1.00.83 in Android 13 allows local…
CVE-2024-20854, published 2024-04-02. Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days. Improper handling of insufficient privileges vulnerability in Samsung Camera prior to versions 12.1.0.31 in Android 12, 13.1.02.07 in Android 13, and 14.0.01.06 in Android 14 allows local attackers…
CVE-2026-21014, published 2026-04-13. Low severity, CVSS 2.8. EPSS: 0.1% chance of exploitation in the next 30 days. Improper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to access location data. User interaction is required for triggering this vulnerability.