CVE-2016-6910

The non-existent notification listener vulnerability was introduced in the initial Android 5.0.2 builds for the Samsung Galaxy S6 Edge devices, but the vulnerability can persist on the device even after the device has been upgraded to an Android 5.1.1 or 6.0.1 build. The vulnerable system app giv...

Samsung Galaxy S4-S7 Device Denial of Service Vulnerability

The Samsung Galaxy S4 and others are smart mobile devices released by the South Korean company Samsung Samsung. A denial of service vulnerability exists in Samsung Galaxy S4 to S7 devices. An attacker can exploit the vulnerability to cause a sustained Android system crash, rendering the device...

CVE-2016-7990

Samsung Galaxy S4–S7 are affected by an integer overflow in libomacp.so while parsing OMACP/WAP Push SMS messages, causing heap corruption with potential denial of service and remote code execution (as part of SVE-2016-6542). The vulnerability affects the OMACP parsing path and is documented in C...

CVE-2016-7991

The CVE affects Samsung Galaxy S4 through S7 devices where the omacp app ignores security information embedded in OMACP messages. This allows remote unsolicited WAP Push SMS messages to be accepted, parsed, and acted upon, leading to unauthorized configuration changes. Root cause is the omacp han...

CVE-2016-7988

The CVE describes an issue on Samsung Galaxy devices (S4–S7) where the BroadcastReceiver for com.[Samsung].android.intent.action.SET_WIFI lacks required permissions. This permits unsolicited configuration messages to be processed by wifi-service.jar within the Android Framework, as part of the vu...

Theme for Samsung S6 Edge+ - External URLs, Possible privilege escalation, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Theme for Samsung S6 Edge+ published at the 'play' market has multiple vulnerabilities...

Lock Screen Galaxy S6 Edge - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Lock Screen Galaxy S6 Edge published at the 'play' market has multiple vulnerabilities...

S Launcher (Galaxy S6 Launcher - Customized SSL, Exported ContentProvider, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application S Launcher Galaxy S6 Launcher published at the 'play' market has multiple vulnerabilities...

CM12.x/CM13 Galaxy S6 - Corrupted files, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application CM12.x/CM13 Galaxy S6 published at the 'play' market has multiple vulnerabilities...

Lock Screen Galaxy S6 Theme - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Lock Screen Galaxy S6 Theme published at the 'play' market has multiple vulnerabilities...

Samsung Galaxy S6 Experience - SD-card access, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Samsung Galaxy S6 Experience published at the 'play' market has multiple vulnerabilities...

Samsung Galaxy S6 - android.media.process MdConvertLine Face Recognition Memory Corruption

Samsung Galaxy S6 - android.media.process MdConvertLine Face Recognition Memory Corruption Source: https://code.google.com/p/google-security-research/issues/detail?id=616 The attached file causes memory corruption when iy is scanned by the face recognition library in android.media.process F/libc...

Samsung Galaxy S6 - libQjpeg je_free Crash

Exploit for Android platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=617 The attached jpg causes an invalid pointer to be freed when media scanning occurs. F/libc 11192: Fatal signal 11 SIGSEGV, code 1, fault addr 0xffffffffffffb0 in tid...

Samsung Galaxy S6 - android.media.process Face Recognition Memory Corruption (MdConvertLine)

Exploit for Android platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=616 The attached file causes memory corruption when iy is scanned by the face recognition library in android.media.process F/libc 4134: Fatal signal 11 SIGSEGV, code 1,...

Samsung Galaxy S6 - libQjpeg je_free Crash

Samsung Galaxy S6 - libQjpeg jefree Crash Source: https://code.google.com/p/google-security-research/issues/detail?id=617 The attached jpg causes an invalid pointer to be freed when media scanning occurs. F/libc 11192: Fatal signal 11 SIGSEGV, code 1, fault addr 0xffffffffffffb0 in tid 14368 HEAV...

Samsung Galaxy S6 - 'android.media.process' 'MdConvertLine' Face Recognition Memory Corruption

Source: https://code.google.com/p/google-security-research/issues/detail?id=616 The attached file causes memory corruption when iy is scanned by the face recognition library in android.media.process F/libc 4134: Fatal signal 11 SIGSEGV, code 1, fault addr 0x33333333333358 in tid 12161 syncThread...

Samsung Galaxy S6 - libQjpeg je_free Crash

Source: https://code.google.com/p/google-security-research/issues/detail?id=617 The attached jpg causes an invalid pointer to be freed when media scanning occurs. F/libc 11192: Fatal signal 11 SIGSEGV, code 1, fault addr 0xffffffffffffb0 in tid 14368 HEAVY7 I/DEBUG 3021: I/DEBUG 3021: Build...

Samsung Note 3 and Galaxy S6 Denial of Service Vulnerability

The Samsung Note 3 and Galaxy S6 are both smartphones released by the South Korean company Samsung Samsung. A security vulnerability exists in the Samsung Note 3 and Galaxy S6. An attacker can exploit the vulnerability to cause a denial of service null pointer backreference by sending an HTTP...

The core area of URL filtering vulnerability affects Samsung Note 3, The Galaxy S6(CVE-2 0 1 6-2 0 3 6)-vulnerability warning-the black bar safety net

A Samsung Note 3, The Galaxy S6 phone Bug-the kernel area of the URL filter will appear what problem? Author: Roberto Paleari @rpaleari and Aristide Fattori @joystickID: CVE-2 0 1 6-2 0 3 6 notification date: 20/10/2 0 1 5 release date: 20/01/2 0 1 6 in the study of the Samsung Android kernel, we...

Samsung Galaxy S6 Denial of Service Vulnerability (CNVD-2015-08538)

The Samsung Galaxy S6 is a smartphone released by the South Korean company Samsung Samsung. The Samsung Galaxy S6 suffers from a denial of service vulnerability. An attacker can exploit the vulnerability to crash the device and deny service to legitimate users...