PT-2020-13244

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 7.2, 8.0, 8.1, 9, and 10 Description An issue was discovered that allows arbitrary code execution via the bootloader due to an EL1/EL3 coldboot vulnerability involving raw resources. This vulnerabilit...

CVE-2020-12753: Out-of-bounds Write

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. Arbitrary code execution can occur via the bootloader because of an EL1/EL3 coldboot vulnerability involving rawresources. The LG ID is LVE-SMP-200006 May 2020...

PT-2020-13238

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with Q10.0 software Description An issue was discovered on Samsung mobile devices due to a heap-based buffer overflow in the Bootloader. This overflow occurs because of the mishandling of specific commands. Recommendatio...

PT-2020-13237

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.X Samsung mobile devices with P9.0 Samsung mobile devices with Q10.0 Description An issue allows attackers to bypass the Secure Bootloader protection mechanism via a heap-based buffer overflow to execute arbitrar...

CVE-2020-12747: Out-of-bounds Write

An issue was discovered on Samsung mobile devices with Q10.0 Exynos980 9630 and Exynos990 9830 chipsets software. The Bootloader has a heap-based buffer overflow because of the mishandling of specific commands. The Samsung IDs are SVE-2020-16981, SVE-2020-16991 May 2020...

CVE-2020-12746: Out-of-bounds Write

An issue was discovered on Samsung mobile devices with O8.X, P9.0, and Q10.0 Exynos chipsets software. Attackers can bypass the Secure Bootloader protection mechanism via a heap-based buffer overflow to execute arbitrary code. The Samsung ID is SVE-2020-16712 May 2020...

CVE-2018-21070

An issue was discovered on Samsung mobile devices with N7.x, O8.0 devices MSM8998 or SDM845 chipsets software. An attacker can bypass Secure Boot and obtain root access because of a missing Bootloader integrity check. The Samsung ID is SVE-2018-11552 May 2018...

CVE-2018-21070

An issue was discovered on Samsung mobile devices with N7.x, O8.0 devices MSM8998 or SDM845 chipsets software. An attacker can bypass Secure Boot and obtain root access because of a missing Bootloader integrity check. The Samsung ID is SVE-2018-11552 May 2018...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with N7.x, O8.0 devices MSM8998 or SDM845 chipsets software. An attacker can bypass Secure Boot and obtain root access because of a missing Bootloader integrity check. The Samsung ID is SVE-2018-11552 May 2018...

CVE-2018-21070

An issue was discovered on Samsung mobile devices with N7.x, O8.0 devices MSM8998 or SDM845 chipsets software. An attacker can bypass Secure Boot and obtain root access because of a missing Bootloader integrity check. The Samsung ID is SVE-2018-11552 May 2018...

CVE-2018-21089

An issue was discovered on Samsung mobile devices with N7.x MT6755/MT6757 Mediatek models software. Bootloader has an integer overflow that leads to arbitrary code execution via the download offset control. The Samsung ID is SVE-2017-10732 January 2018...

CVE-2018-21089

An issue was discovered on Samsung mobile devices with N7.x MT6755/MT6757 Mediatek models software. Bootloader has an integer overflow that leads to arbitrary code execution via the download offset control. The Samsung ID is SVE-2017-10732 January 2018...

Integer overflow

An issue was discovered on Samsung mobile devices with N7.x MT6755/MT6757 Mediatek models software. Bootloader has an integer overflow that leads to arbitrary code execution via the download offset control. The Samsung ID is SVE-2017-10732 January 2018...

PT-2020-8714

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N7.x software Samsung mobile devices with O8.0 software Description An issue allows an attacker to bypass Secure Boot and obtain root access due to a missing Bootloader integrity check on devices with MSM8998 or...

PT-2020-8733

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N7.x MT6755/MT6757 Mediatek models software Description An issue was discovered in the bootloader of Samsung mobile devices, which has an integer overflow. This leads to arbitrary code execution via the download...

Samsung Galaxy S5 Buffer Overflow Vulnerability

The Samsung Galaxy S5 is a smartphone from the South Korean company Samsung Samsung. A buffer overflow vulnerability exists in the Qualcomm bootloader in the Samsung Galaxy S5 with Qualcomm AP chip. An attacker can exploit the vulnerability to execute code on the system...

CVE-2018-21089: Integer Overflow or Wraparound

An issue was discovered on Samsung mobile devices with N7.x MT6755/MT6757 Mediatek models software. Bootloader has an integer overflow that leads to arbitrary code execution via the download offset control. The Samsung ID is SVE-2017-10732 January 2018...

CVE-2018-21070: Improper Validation of Integrity Check Value

An issue was discovered on Samsung mobile devices with N7.x, O8.0 devices MSM8998 or SDM845 chipsets software. An attacker can bypass Secure Boot and obtain root access because of a missing Bootloader integrity check. The Samsung ID is SVE-2018-11552 May 2018...

CVE-2017-18681

An issue was discovered on Samsung Galaxy S5 mobile devices with software through 2016-12-20 Qualcomm AP chipsets. There are multiple buffer overflows in the bootloader. The Samsung ID is SVE-2016-7930 March 2017...

CVE-2017-18649

An issue was discovered on Samsung mobile devices with N7.x software. An attacker can boot a device with root privileges because the bootloader for the Qualcomm MSM8998 chipset lacks an integrity check of the system image, aka the "SamFAIL" issue. The Samsung ID is SVE-2017-10465 November 2017...