Samsung Galaxy s3 Firmware vulnerabilities

4 CVEs affecting Samsung Galaxy s3 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-4764, published 2019-12-27.

More from Samsung.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-16401, published 2019-11-06. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Samsung Galaxy S8 plus (Android version: 8.0.0, Build Number: R16NW.G955USQU5CRG3, Baseband Vendor: Qualcomm Snapdragon 835, Baseband: G955USQU5CRG3), Samsung Galaxy S3 (Android version: 4.3, Build…
• CVE-2019-16400, published 2019-11-06. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Samsung Galaxy S8 plus (Android version: 8.0.0, Build Number: R16NW.G955USQU5CRG3, Baseband Vendor: Qualcomm Snapdragon 835, Baseband: G955USQU5CRG3), Samsung Galaxy S3 (Android version: 4.3, Build…
• CVE-2013-4763, published 2019-12-27. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. Samsung Galaxy S3/S4 exposes an unprotected component allowing arbitrary SMS text messages without requesting permission.
• CVE-2013-4764, published 2019-12-27. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbitrary destinations without permission.