EUVD-2017-9787

Malware in sbrugna...

CVE-2017-18696

An issue was discovered on Samsung mobile devices with M6.0 and N7.0 Exynos7420, Exynos8890, or MSM8996 chipsets software. RKP allows memory corruption. The Samsung ID is SVE-2016-7897 January 2017...

CVE-2018-21058

An issue was discovered on Samsung mobile devices with N7.0, O8.0 exynos7420 or Exynos 8890/8996 chipsets software. Cache attacks can occur against the Keymaster AES-GCM implementation because T-Tables are used; the Cryptography Extension CE is not used. The Samsung ID is SVE-2018-12761 September...

CVE-2018-21058

An issue was discovered on Samsung mobile devices with N7.0, O8.0 exynos7420 or Exynos 8890/8996 chipsets software. Cache attacks can occur against the Keymaster AES-GCM implementation because T-Tables are used; the Cryptography Extension CE is not used. The Samsung ID is SVE-2018-12761 September...

CVE-2017-18690

An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, M6.0, and N7.0 Exynos54xx, Exynos7420, Exynos8890, or Exynos8895 chipsets software. There is a buffer overflow in the sensor hub. The Samsung ID is SVE-2016-7484 January 2017...

Code injection

An issue was discovered on Samsung mobile devices with M6.0 and N7.x Exynos7420 or Exynox8890 chipsets software. The Camera application can leak uninitialized memory via ion. The Samsung ID is SVE-2016-6989 April 2017...

CVE-2017-18696

An issue was discovered on Samsung mobile devices with M6.0 and N7.0 Exynos7420, Exynos8890, or MSM8996 chipsets software. RKP allows memory corruption. The Samsung ID is SVE-2016-7897 January 2017...

Memory corruption

An issue was discovered on Samsung mobile devices with M6.0 and N7.0 Exynos7420, Exynos8890, or MSM8996 chipsets software. RKP allows memory corruption. The Samsung ID is SVE-2016-7897 January 2017...

CVE-2017-18689

An issue was discovered on Samsung mobile devices with M6.0 and N7.0 Exynos5433, Exynos7420, or Exynos7870 chipsets software. An attacker can bypass a ko aka Kernel Module signature by modifying the count of kernel modules. The Samsung ID is SVE-2016-7466 January 2017...

CVE-2017-18690

CVE-2017-18690 involves a buffer overflow in the sensor hub of certain Samsung mobile devices. Affected platforms include KK (4.4), L (5.0/5.1), M (6.0), and N (7.0) with Exynos54xx, Exynos7420, Exynos8890, or Exynos8895 chipsets. The available public description notes a sensor-hub buffer overflo...

CVE-2017-18696

CVE-2017-18696 affects Samsung mobile devices running M(6.0) and N(7.0) on Exynos7420, Exynos8890 or MSM8996 chipsets. Affected component is unspecified in the provided documents, but the issue is described as a memory corruption vulnerability tied to RKP (Samsung’s kernel protection feature). Im...

CVE-2017-18696

An issue was discovered on Samsung mobile devices with M6.0 and N7.0 Exynos7420, Exynos8890, or MSM8996 chipsets software. RKP allows memory corruption. The Samsung ID is SVE-2016-7897 January 2017...

CVE-2017-18690: Buffer Copy without Checking Size of Input

An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, M6.0, and N7.0 Exynos54xx, Exynos7420, Exynos8890, or Exynos8895 chipsets software. There is a buffer overflow in the sensor hub. The Samsung ID is SVE-2016-7484 January 2017...

CVE-2017-18675: Missing Release of Resource after Effective Lifetime

An issue was discovered on Samsung mobile devices with M6.0 and N7.x Exynos7420 or Exynox8890 chipsets software. The Camera application can leak uninitialized memory via ion. The Samsung ID is SVE-2016-6989 April 2017...

CVE-2017-18696: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on Samsung mobile devices with M6.0 and N7.0 Exynos7420, Exynos8890, or MSM8996 chipsets software. RKP allows memory corruption. The Samsung ID is SVE-2016-7897 January 2017...

Heap overflow

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 MSM8996, MSM8998, Exynos7420, Exynos7870, Exynos8890, and Exynos8895 chipsets software. A heap overflow in the keymaster Trustlet allows attackers to write to TEE memory, and achieve arbitrary code execution. The Samsung ...

CVE-2019-20607

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 MSM8996, MSM8998, Exynos7420, Exynos7870, Exynos8890, and Exynos8895 chipsets software. A heap overflow in the keymaster Trustlet allows attackers to write to TEE memory, and achieve arbitrary code execution. The Samsung ...