Actively exploited vulnerabilities affecting Samsung products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2024-7399https://wildfortech.com/security#CVE-2024-7399Samsung MagicINFO 9 Server, a digital signage management platform, contains a path traversal flaw that lets unauthenticated or low-privilege attackers write arbitrary files with system-level authority. This is serious because writing files as the system account can enable full server compromise — attackers could plant web shells, overwrite configuration files, or stage further attacks across managed display infrastructure without needing elevated credentials.Fri, 24 Apr 2026 00:00:00 GMTSamsungMagicINFO 9 Serverhttps://wildfortech.com/security#CVE-2025-21042https://wildfortech.com/security#CVE-2025-21042A flaw in Samsung's libimagecodec.quram.so library allows remote attackers to write data outside intended memory boundaries, potentially enabling arbitrary code execution on affected mobile devices. Because exploitation can be triggered remotely without physical access, a successful attack could give an attacker full control over the device — including access to sensitive data, communications, and corporate resources — making this a serious risk for any organization with Samsung devices in its environment.Mon, 10 Nov 2025 00:00:00 GMTSamsungMobile Deviceshttps://wildfortech.com/security#CVE-2025-21043https://wildfortech.com/security#CVE-2025-21043An out-of-bounds write flaw in Samsung's libimagecodec.quram.so library allows remote attackers to execute arbitrary code on affected Samsung mobile devices without requiring physical access. This is a serious risk because successful exploitation could give attackers full control over a device, potentially exposing corporate email, credentials, sensitive data, and enabling further network compromise — all without user interaction beyond receiving or processing malicious content.Thu, 02 Oct 2025 00:00:00 GMTSamsungMobile Deviceshttps://wildfortech.com/security#CVE-2025-4632https://wildfortech.com/security#CVE-2025-4632Samsung MagicINFO 9 Server, a digital signage management platform, contains a path traversal flaw that lets an unauthenticated or remote attacker write arbitrary files with system-level authority. This is severe because writing files as the system account can enable full server compromise — attackers could plant web shells, overwrite configuration files, or establish persistent backdoors — affecting any organization running digital signage infrastructure on this platform.Thu, 22 May 2025 00:00:00 GMTSamsungMagicINFO 9 Server