CVE-2022-22265
Samsung Mobile Devices
Samsung Mobile Devices Use-After-Free Vulnerability
What it is
Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution.
What to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
- security.samsungmobile.com/securityUpdate.smsb?year=2022&month=1
- nvd.nist.gov/vuln/detail/CVE-2022-22265
Description and required action as published by CISA. Full record at NVD.
Other Samsung entries on the list
- MagicINFO 9 Server Samsung MagicINFO 9 Server Path Traversal Vulnerability CVE-2024-7399 · Apr 24, 2026
- Mobile Devices Samsung Mobile Devices Out-of-Bounds Write Vulnerability CVE-2025-21042 · Nov 10, 2025
- Mobile Devices Samsung Mobile Devices Out-of-Bounds Write Vulnerability CVE-2025-21043 · Oct 2, 2025
- MagicINFO 9 Server Samsung MagicINFO 9 Server Path Traversal Vulnerability CVE-2025-4632 · May 22, 2025
- Mobile Devices Samsung Mobile Devices Improper Input Validation Vulnerability CVE-2021-25489 · Jun 29, 2023
- Mobile Devices Samsung Mobile Devices Out-of-Bounds Read Vulnerability CVE-2021-25487 · Jun 29, 2023