[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMQJ3vCJv6Eu1W0fIaV5k1Y2KTL05iN8NT7bfJawzAPM":3,"g5a-ex:samsung\u002Fgalaxy_s4@*":94,"g5a-family:samsung\u002Fgalaxy_s4":96},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":71,"seoMetadata":72,"meta":91},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"samsung","galaxy_s4",0,14,"2019-12-27",[],"Galaxy S4 by Samsung is a technology product and 14 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,33,39,44,50,54,57,63,67],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2015-1801","The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers to cause a denial of service (memory corruption) or gain privileges.","2017-08-24",9.8,"v3.0","Critical",false,0.03888,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":23,"epssScore":32},"CVE-2015-4641","Directory traversal vulnerability in the SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices allows remote web servers to write to arbitrary files, and consequently execute arbitrary code in a privileged context, by leveraging control of the skslm.swiftkey.net domain name and providing a .. (dot dot) in an entry in a ZIP archive, as demonstrated by a traversal to the \u002Fdata\u002Fdalvik-cache directory.","2015-06-19",6.4,"v2","Medium",0.03683,{"cveId":34,"description":35,"publishedDate":19,"cvssScore":36,"cvssVersion":21,"severity":37,"isKev":23,"epssScore":38},"CVE-2015-1800","The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers to potentially obtain sensitive information.",7.5,"High",0.02798,{"cveId":40,"description":41,"publishedDate":42,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":43},"CVE-2016-7990","On Samsung Galaxy S4 through S7 devices, an integer overflow condition exists within libomacp.so when parsing OMACP messages (within WAP Push SMS messages) leading to a heap corruption that can result in Denial of Service and potentially remote code execution, a subset of SVE-2016-6542.","2016-10-31",0.0207,{"cveId":45,"description":46,"publishedDate":28,"cvssScore":47,"cvssVersion":30,"severity":48,"isKev":23,"epssScore":49},"CVE-2015-4640","The SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices relies on an HTTP connection to the skslm.swiftkey.net server, which allows man-in-the-middle attackers to write to language-pack files by modifying an HTTP response.  NOTE: CVE-2015-4640 exploitation can be combined with CVE-2015-4641 exploitation for man-in-the-middle code execution.",2.9,"Low",0.00945,{"cveId":51,"description":52,"publishedDate":42,"cvssScore":36,"cvssVersion":21,"severity":37,"isKev":23,"epssScore":53},"CVE-2016-7989","On Samsung Galaxy S4 through S7 devices, a malformed OTA WAP PUSH SMS containing an OMACP message sent remotely triggers an unhandled ArrayIndexOutOfBoundsException in Samsung's implementation of the WifiServiceImpl class within wifi-service.jar. This causes the Android runtime to continually crash, rendering the device unusable until a factory reset is performed, a subset of SVE-2016-6542.",0.00604,{"cveId":55,"description":56,"publishedDate":42,"cvssScore":36,"cvssVersion":21,"severity":37,"isKev":23,"epssScore":53},"CVE-2016-7988","On Samsung Galaxy S4 through S7 devices, absence of permissions on the BroadcastReceiver responsible for handling the com.[Samsung].android.intent.action.SET_WIFI intent leads to unsolicited configuration messages being handled by wifi-service.jar within the Android Framework, a subset of SVE-2016-6542.",{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":21,"severity":31,"isKev":23,"epssScore":62},"CVE-2016-4031","Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices allow attackers to send AT commands by plugging the device into a Linux host, aka SVE-2016-5301.","2017-04-13",6.8,0.0052,{"cveId":64,"description":65,"publishedDate":60,"cvssScore":61,"cvssVersion":21,"severity":31,"isKev":23,"epssScore":66},"CVE-2016-4030","Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9195XXUCOL1 (Galaxy S4 mini LTE), and GT-I9505 build I9505XXUHOJ2 (Galaxy S4) devices have unintended availability of the modem in USB configuration number 2 within the secure lockscreen state, allowing an attacker to make phone calls, send text messages, or issue commands, aka SVE-2016-5301.",0.00505,{"cveId":68,"description":69,"publishedDate":42,"cvssScore":36,"cvssVersion":21,"severity":37,"isKev":23,"epssScore":70},"CVE-2016-7991","On Samsung Galaxy S4 through S7 devices, the \"omacp\" app ignores security information embedded in the OMACP messages resulting in remote unsolicited WAP Push SMS messages being accepted, parsed, and handled by the device, leading to unauthorized configuration changes, a subset of SVE-2016-6542.",0.00492,[],{"title":73,"metaDescription":74,"keywords":75,"structuredData":76},"Galaxy S4 by Samsung - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Galaxy S4 by Samsung with 14 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Galaxy S4 vulnerabilities, Galaxy S4 security, Galaxy S4 CVE, Samsung Galaxy S4, Galaxy S4 threat intelligence, Samsung security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":77,"@type":78,"name":79,"description":74,"url":80,"manufacturer":81,"applicationCategory":85,"softwareVersion":86,"mainEntity":87},"https:\u002F\u002Fschema.org","SoftwareApplication","Galaxy S4","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsamsung\u002Fgalaxy_s4",{"@type":82,"name":83,"url":84},"Organization","Samsung","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsamsung","Security Software","Multiple versions",{"@type":88,"name":89,"description":90,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Galaxy S4 Security Vulnerabilities","Security vulnerabilities affecting Galaxy S4 by Samsung",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":92,"apiVersion":93},"2026-10-18T22:33:11.671Z","3.0",{"rows":95,"total":9,"capped":23,"failed":9},[],[97,100,103,106,108],{"product":98,"cves":99},"galaxy_s4_mini",9,{"product":101,"cves":102},"galaxy_s4_firmware",8,{"product":104,"cves":105},"galaxy_s4_mini_firmware",3,{"product":107,"cves":105},"galaxy_s4_mini_lte",{"product":109,"cves":105},"galaxy_s4_mini_lte_firmware"]