CVE-2022-22265
Samsung Mobile Devices Use-After-Free Vulnerability
CVSS
—
No CVSS
EPSS
0.4%
p31
KEV
YES
Sep 18, 2023
Exploit Today
59
0-100
Published: — · Last modified: —
0.4%EPSS · 30 days0.4%
2026-09-172026-10-15
Product
Samsung / Mobile Devices
Vulnerability
Samsung Mobile Devices Use-After-Free Vulnerability
Added to KEV
Sep 18, 2023
Remediate by
Oct 9, 2023
Known ransomware use
No
Summary description
Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notes
https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=1; https://nvd.nist.gov/vuln/detail/CVE-2022-22265
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-210438.8 HIG81.7%
KEV—75Samsung Mobile Devices Out-of-Bounds Write Vulnerability8dCVE-2025-210428.8 HIG98.4%
KEV—80Samsung Mobile Devices Out-of-Bounds Write Vulnerability8dCVE-2021-25337—86.3%
KEV—76Samsung Mobile Devices Improper Access Control Vulnerability—CVE-2023-21492—84.8%
KEV—75Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability—CVE-2021-25369—64.4%
KEV—69Samsung Mobile Devices Improper Access Control Vulnerability—CVE-2021-25370—58.6%
KEV—68Samsung Mobile Devices Memory Corruption Vulnerability—