CVE-2017-18676

An issue was discovered on Samsung mobile devices with N7.0 Qualcomm chipsets software. There is an RKP kernel protection bypass in which unwanted memory mappings may occur because of a lack of MSR trapping. The Samsung ID is SVE-2016-7901 April 2017...

CVE-2017-18649

An issue was discovered on Samsung mobile devices with N7.x software. An attacker can boot a device with root privileges because the bootloader for the Qualcomm MSM8998 chipset lacks an integrity check of the system image, aka the "SamFAIL" issue. The Samsung ID is SVE-2017-10465 November 2017...

CVE-2017-18649

An issue was discovered on Samsung mobile devices with N7.x software. An attacker can boot a device with root privileges because the bootloader for the Qualcomm MSM8998 chipset lacks an integrity check of the system image, aka the "SamFAIL" issue. The Samsung ID is SVE-2017-10465 November 2017...

Buffer overflow

An issue was discovered on Samsung Galaxy S5 mobile devices with software through 2016-12-20 Qualcomm AP chipsets. There are multiple buffer overflows in the bootloader. The Samsung ID is SVE-2016-7930 March 2017...

Code injection

An issue was discovered on Samsung mobile devices with N7.x software. An attacker can boot a device with root privileges because the bootloader for the Qualcomm MSM8998 chipset lacks an integrity check of the system image, aka the "SamFAIL" issue. The Samsung ID is SVE-2017-10465 November 2017...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with N7.0 Qualcomm chipsets software. There is an RKP kernel protection bypass in which unwanted memory mappings may occur because of a lack of MSR trapping. The Samsung ID is SVE-2016-7901 April 2017...

CVE-2017-18649

The CVE-2017-18649 issue affects Samsung mobile devices running N(7.x) software. The bootloader for the Qualcomm MSM8998 chipset lacks an integrity check of the system image, enabling an attacker to boot with root privileges (SamFAIL). The Samsung ID is SVE-2017-10465. No additional technical det...

CVE-2017-18676

An issue was discovered on Samsung mobile devices with N7.0 Qualcomm chipsets software. There is an RKP kernel protection bypass in which unwanted memory mappings may occur because of a lack of MSR trapping. The Samsung ID is SVE-2016-7901 April 2017...

CVE-2017-18676

CVE-2017-18676 affects Samsung mobile devices running Android N (7.0) on Qualcomm chipsets and is described as an RKP kernel protection bypass caused by a lack of MSR trapping, enabling potential unwanted memory mappings. The issue is tied to Samsung ID SVE-2016-7901 (April 2017). Connected docum...

CVE-2017-18681

An issue was discovered on Samsung Galaxy S5 mobile devices with software through 2016-12-20 Qualcomm AP chipsets. There are multiple buffer overflows in the bootloader. The Samsung ID is SVE-2016-7930 March 2017...

Null pointer dereference

An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, and M6.0 AP + CP MDM9x35, or Qualcomm Onechip software. There is a NULL pointer dereference issue in the IPC socket code. The Samsung ID is SVE-2016-5980 July 2016...

Android Security Bulletin—April 2020Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2020-04-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

Pixel Update Bulletin—April 2020Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2020-04-05 or later address all issues in this bulletin and all issues in the April 2020 Android Securi...

CVE-2019-20603

An issue was discovered on Samsung mobile devices with N7.x, O8.0, and P9.0 Qualcomm chipsets software. The ESECOMM Trustlet has a NULL pointer dereference. The Samsung ID is SVE-2019-13950 May 2019...

CVE-2019-20603

An issue was discovered on Samsung mobile devices with N7.x, O8.0, and P9.0 Qualcomm chipsets software. The ESECOMM Trustlet has a NULL pointer dereference. The Samsung ID is SVE-2019-13950 May 2019...

CVE-2019-20602

An issue was discovered on Samsung mobile devices with N7.x, O8.0, and P9.0 Qualcomm chipsets software. The Authnr Trustlet has a NULL pointer dereference. The Samsung ID is SVE-2019-13949 May 2019...

CVE-2019-20602

An issue was discovered on Samsung mobile devices with N7.x, O8.0, and P9.0 Qualcomm chipsets software. The Authnr Trustlet has a NULL pointer dereference. The Samsung ID is SVE-2019-13949 May 2019...

CVE-2019-20590

An issue was discovered on Samsung mobile devices with O8.x Qualcomm chipsets software. There is an integer underflow in the Secure Storage Trustlet. The Samsung ID is SVE-2019-13952 July 2019...

CVE-2019-20590

An issue was discovered on Samsung mobile devices with O8.x Qualcomm chipsets software. There is an integer underflow in the Secure Storage Trustlet. The Samsung ID is SVE-2019-13952 July 2019...

Null pointer dereference

An issue was discovered on Samsung mobile devices with N7.x, O8.0, and P9.0 Qualcomm chipsets software. The ESECOMM Trustlet has a NULL pointer dereference. The Samsung ID is SVE-2019-13950 May 2019...