Buffer overflow

An issue was discovered on Samsung mobile devices with M6.0 and N7.x software. There is a buffer overflow in processciphertdea. The Samsung ID is SVE-2017-8973 July 2017...

Code injection

An issue was discovered on Samsung mobile devices with L5.0/5.1 and M6.0 software. SVoice allows Hare Hunting during application installation. The Samsung ID is SVE-2016-6942 February 2017...

Code injection

An issue was discovered on Samsung mobile devices with M6.0 software. Attackers can prevent users from making outbound calls and sending outbound text messages. The Samsung ID is SVE-2017-8706 June 2017...

Code injection

An issue was discovered on Samsung mobile devices with L5.0/5.1 and M6.0 software. SVoice allows provider seizure via an application that uses a custom provider. The Samsung ID is SVE-2016-6942 February 2017...

CVE-2017-18652

An issue was discovered on Samsung mobile devices with M6.0 and N7.x software. SVoice allows arbitrary code execution by changing dynamic libraries. The Samsung ID is SVE-2017-9299 September 2017...

CVE-2017-18656

CVE-2017-18656 describes a buffer over-read in a trustlet on Samsung mobile devices running M(6.0) and N(7.x). Affected component is the trustlet; root cause is a buffer over-read. The issue has been reported across multiple sources (NVD, Red Hat CVE page, CVE records) with the Samsung ID SVE-201...

CVE-2017-18658

Samsung mobile devices running M(6.0) software are affected by CVE-2017-18658 via the multiwindow_facade API. The vulnerability allows an attacker to cause a NullPointerException and system halt by attempting a screen touch on a non-existing display. Affected component and root cause are noted as...

CVE-2017-18665

An issue was discovered on Samsung mobile devices with M6.0 software. There is a NULL pointer exception in WifiService via adb-cmd, causing memory corruption. The Samsung ID is SVE-2017-8287 June 2017...

CVE-2017-18665

Samsung mobile devices running Android M (6.0) are affected by CVE-2017-18665 due to a NULL pointer dereference in WifiService via adb-cmd, leading to memory corruption. Connected sources consistently identify the vulnerability as located in WifiService and tied to Samsung’s SVE-2017-8287 (June 2...

CVE-2017-18668

CVE-2017-18668 affects Samsung mobile devices running Android M (6.0) software. The records indicate the vulnerability allows an attacker to prevent users from making outbound calls and sending outbound text messages, linked to Samsung ID SVE-2017-8706. The available documents do not specify the ...

CVE-2017-18679

CVE-2017-18679 affects Samsung mobile devices running Android M (6.0). The issue arises from SLocation triggering a system crash when calling an API that is not implemented. The vulnerability impact is a denial of service via a crash, with an Availability impact of HIGH per CVSS 3.1 metrics, and ...

CVE-2017-18679

An issue was discovered on Samsung mobile devices with M6.0 software. SLocation can cause a system crash via a call to an API that is not implemented. The Samsung ID is SVE-2017-8285 April 2017...

CVE-2016-11032

An issue was discovered on Samsung mobile devices with M6.0 software. An attacker can disable all Sound functionality by broadcasting an unprotected intent. The Samsung IDs are SVE-2016-7179 and SVE-2016-7182 November 2016...

CVE-2016-11032

An issue was discovered on Samsung mobile devices with M6.0 software. An attacker can disable all Sound functionality by broadcasting an unprotected intent. The Samsung IDs are SVE-2016-7179 and SVE-2016-7182 November 2016...

CVE-2016-11036

An issue was discovered on Samsung mobile devices with M6.0 software. There is a Factory Reset Protection FRP bypass. The Samsung ID is SVE-2016-6008 August 2016...

CVE-2016-11027

An issue was discovered on Samsung mobile devices with M6.0 software. In the Shade Locked state, a physically proximate attacker can read notifications on the lock screen. The Samsung ID is SVE-2016-7132 December 2016...

CVE-2017-18690

CVE-2017-18690 involves a buffer overflow in the sensor hub of certain Samsung mobile devices. Affected platforms include KK (4.4), L (5.0/5.1), M (6.0), and N (7.0) with Exynos54xx, Exynos7420, Exynos8890, or Exynos8895 chipsets. The available public description notes a sensor-hub buffer overflo...

CVE-2016-11033

CVE-2016-11033 affects Samsung mobile devices running M(6.0). Affected component is tlc_server, with a heap-based buffer overflow as the root cause. Samsung IDs: SVE-2016-7220 and SVE-2016-7225. Impact and exploitability are described in the linked metrics (CVSS v2/base 7.5 HIGH; CVSS v3.1/base 9...

CVE-2016-11033

An issue was discovered on Samsung mobile devices with M6.0 software. There is a heap-based buffer overflow in tlcserver. The Samsung IDs are SVE-2016-7220 and SVE-2016-7225 November 2016...

CVE-2016-11034

CVE-2016-11034 affects Samsung mobile devices running L/5.0–5.1 and M/6.0 where the decode function in Qjpeg (Qt 5.7) can trigger a system crash via a malformed image. Root cause: improper handling in Qjpeg decoding. Affected component: Qt 5.7 Qjpeg on Samsung devices (SVE-2016-6560). Impact: sys...