PT-2021-16531 · Samsung · Samsung Mobile Devices

Name of the Vulnerable Software and Affected Versions: Samsung mobile devices prior to SMR Mar-2021 Release 1 Description: The issue is related to improper memory access control in RKP, allowing an attacker with a compromised kernel to write to certain parts of the RKP EL2 memory region...

CVE-2020-25053

An issue was discovered on Samsung mobile devices with Q10.0 exynos9830 chipsets software. RKP allows arbitrary code execution. The Samsung ID is SVE-2020-17435 August 2020...

CVE-2020-25053

An issue was discovered on Samsung mobile devices with Q10.0 exynos9830 chipsets software. RKP allows arbitrary code execution. The Samsung ID is SVE-2020-17435 August 2020...

Code injection

An issue was discovered on Samsung mobile devices with Q10.0 exynos9830 chipsets software. RKP allows arbitrary code execution. The Samsung ID is SVE-2020-17435 August 2020...

CVE-2020-25053

An issue was discovered on Samsung mobile devices with Q10.0 exynos9830 chipsets software. RKP allows arbitrary code execution. The Samsung ID is SVE-2020-17435 August 2020...

CVE-2020-25053

CVE-2020-25053 affects Samsung mobile devices running Android Q (10.0) on Exynos9830. Root cause: RKP permits arbitrary code execution. Impact: remote code execution with high severity (CVSS v3.1 base 9.8, network access, no user interaction). Exploitation details are not provided in the document...

CVE-2020-13829

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Attackers can disable the SEAndroid protection mechanism in the RKP. The Samsung ID is SVE-2019-15998 June 2020...

Code injection

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Attackers can disable the SEAndroid protection mechanism in the RKP. The Samsung ID is SVE-2019-15998 June 2020...

CVE-2020-13829

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Attackers can disable the SEAndroid protection mechanism in the RKP. The Samsung ID is SVE-2019-15998 June 2020...

CVE-2017-18676

An issue was discovered on Samsung mobile devices with N7.0 Qualcomm chipsets software. There is an RKP kernel protection bypass in which unwanted memory mappings may occur because of a lack of MSR trapping. The Samsung ID is SVE-2016-7901 April 2017...

CVE-2017-18662

An issue was discovered on Samsung mobile devices with M6.0 and N7.x software. Data outside of the rkp log buffer boundary is read, causing an information leak. The Samsung ID is SVE-2017-9109 July 2017...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with N7.0 Qualcomm chipsets software. There is an RKP kernel protection bypass in which unwanted memory mappings may occur because of a lack of MSR trapping. The Samsung ID is SVE-2016-7901 April 2017...

CVE-2017-18676

CVE-2017-18676 affects Samsung mobile devices running Android N (7.0) on Qualcomm chipsets and is described as an RKP kernel protection bypass caused by a lack of MSR trapping, enabling potential unwanted memory mappings. The issue is tied to Samsung ID SVE-2016-7901 (April 2017). Connected docum...

CVE-2017-18676

An issue was discovered on Samsung mobile devices with N7.0 Qualcomm chipsets software. There is an RKP kernel protection bypass in which unwanted memory mappings may occur because of a lack of MSR trapping. The Samsung ID is SVE-2016-7901 April 2017...

CVE-2017-18696

An issue was discovered on Samsung mobile devices with M6.0 and N7.0 Exynos7420, Exynos8890, or MSM8996 chipsets software. RKP allows memory corruption. The Samsung ID is SVE-2016-7897 January 2017...

Memory corruption

An issue was discovered on Samsung mobile devices with M6.0 and N7.0 Exynos7420, Exynos8890, or MSM8996 chipsets software. RKP allows memory corruption. The Samsung ID is SVE-2016-7897 January 2017...

CVE-2017-18696

An issue was discovered on Samsung mobile devices with M6.0 and N7.0 Exynos7420, Exynos8890, or MSM8996 chipsets software. RKP allows memory corruption. The Samsung ID is SVE-2016-7897 January 2017...

CVE-2019-20601

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos7570, 7580, 7870, 7880, and 8890 chipsets software. RKP memory corruption causes an arbitrary write to protected memory. The Samsung ID is SVE-2019-13921-2 May 2019...

Memory corruption

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos7570, 7580, 7870, 7880, and 8890 chipsets software. RKP memory corruption causes an arbitrary write to protected memory. The Samsung ID is SVE-2019-13921-2 May 2019...

CVE-2019-20553

An issue was discovered on Samsung mobile devices with P9.0 SM6150, SM8150, SM8150FUSION, exynos7885, exynos9610, and exynos9820 chipsets software. Arbitrary memory read and write operations can occur in RKP. The Samsung ID is SVE-2019-15143 October 2019...