Samsung Galaxy s4 Firmware vulnerabilities

8 CVEs affecting Samsung Galaxy s4 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-4764, published 2019-12-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-1801, published 2017-08-24. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers to cause a denial of service (memory corruption) or gain privileges.
CVE-2015-1800, published 2017-08-24. High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days. The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers to potentially obtain sensitive information.
CVE-2016-4031, published 2017-04-13. Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days. Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and…
CVE-2016-4030, published 2017-04-13. Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days. Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and…
CVE-2016-4032, published 2017-04-13. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and…
CVE-2013-4763, published 2019-12-27. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. Samsung Galaxy S3/S4 exposes an unprotected component allowing arbitrary SMS text messages without requesting permission.
CVE-2013-4764, published 2019-12-27. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbitrary destinations without permission.
CVE-2019-12762, published 2019-06-06. Medium severity, CVSS 4.2. EPSS: 0.2% chance of exploitation in the next 30 days. Xiaomi Mi 5s Plus devices allow attackers to trigger touchscreen anomalies via a radio signal between 198 kHz and 203 kHz, as demonstrated by a transmitter and antenna hidden just beneath the surface…