CVE-2021-25396

An improper input validation vulnerability in NPU firmware prior to SMR MAY-2021 Release 1 allows arbitrary memory write and code execution...

CVE-2021-25396

An improper input validation vulnerability in NPU firmware prior to SMR MAY-2021 Release 1 allows arbitrary memory write and code execution...

CVE-2021-25396

CVE-2021-25396 affects Samsung devices with NPU firmware prior to SMR MAY-2021 Release 1, where improper input validation enables arbitrary memory writes and code execution. Root cause is input validation weakness in the NPU firmware. Impact per CVSS indicates local access, high confidentiality/i...

CVE-2021-25407

A possible out of bounds write vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write...

CVE-2021-25407

Summary (CVE-2021-25407) : A vulnerability in Samsung’s NPU driver (pre-SMR JUN-2021 Release 1) enables an out-of-bounds write, allowing arbitrary memory writes. The issue is rooted in the NPU driver and affects devices using the affected firmware. Publicly disclosed data indicate potential impac...

CVE-2021-25408

A possible buffer overflow vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write and code execution...

CVE-2021-25408

CVE-2021-25408 concerns a buffer overflow in the NPU driver prior to Samsung SMR JUN-2021 Release 1. The underlying issue is a memory overwrite vulnerability in the driver that could lead to arbitrary memory write and code execution. Affected product scope is the NPU driver as described; no speci...

PT-2021-16599

Name of the Vulnerable Software and Affected Versions: NPU driver versions prior to SMR JUN-2021 Release 1 Description: A possible buffer overflow vulnerability in the NPU driver allows arbitrary memory write and code execution. Recommendations: For versions prior to SMR JUN-2021 Release 1, updat...

PT-2021-16598

Name of the Vulnerable Software and Affected Versions: NPU driver versions prior to SMR JUN-2021 Release 1 Description: A possible out of bounds write vulnerability in the NPU driver allows arbitrary memory write. Recommendations: For versions prior to SMR JUN-2021 Release 1, update to SMR JUN-20...

PT-2021-16587

Name of the Vulnerable Software and Affected Versions: NPU firmware versions prior to SMR MAY-2021 Release 1 Description: The issue is related to improper input validation in the NPU firmware, which allows for arbitrary memory write and code execution. Recommendations: For NPU firmware versions...

CVE-2021-25396: Out-of-bounds Write

An improper input validation vulnerability in NPU firmware prior to SMR MAY-2021 Release 1 allows arbitrary memory write and code execution...

CVE-2021-25407: Out-of-bounds Write

A possible out of bounds write vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write...

CVE-2021-25408: Out-of-bounds Write

A possible buffer overflow vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write and code execution...

An iOS hacker tries Android

Written by Brandon Azad, when working at Project Zero One of the amazing aspects of working at Project Zero is having the flexibility to direct my own research agenda. My prior work has almost exclusively focused on iOS exploitation, but back in August, I thought it could be interesting to try...

CVE-2020-28343

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 Exynos 980, 9820, and 9830 chipsets software. The NPU driver allows attackers to execute arbitrary code because of unintended write and read operations on memory. The Samsung ID is SVE-2020-18610 November 2020...

Code injection

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 Exynos 980, 9820, and 9830 chipsets software. The NPU driver allows attackers to execute arbitrary code because of unintended write and read operations on memory. The Samsung ID is SVE-2020-18610 November 2020...

CVE-2020-28343

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 Exynos 980, 9820, and 9830 chipsets software. The NPU driver allows attackers to execute arbitrary code because of unintended write and read operations on memory. The Samsung ID is SVE-2020-18610 November 2020...

PT-2020-16986

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with P9.0 and Q10.0 software Description An issue was discovered that allows attackers to execute arbitrary code because of unintended write and read operations on memory due to a problem in the NPU driver. This issue...

CVE-2020-28343: Out-of-bounds Write

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 Exynos 980, 9820, and 9830 chipsets software. The NPU driver allows attackers to execute arbitrary code because of unintended write and read operations on memory. The Samsung ID is SVE-2020-18610 November 2020...

CVE-2020-3647

u'Potential buffer overflow when accessing npu debugfs node "off"/"log" with large buffer size' in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, QCS405, SC8180X, SDX55, SM6150, SM7150, SM8150...