1458 matches found
CVE-2018-10751
CVE-2018-10751 is a confirmed memory-corruption vulnerability in Samsung Galaxy S7 Edge caused by an integer overflow during processing of the OMACP WAP push payload’s String Extension in WbXml. A malformed OMACP WAP push can be delivered via SMS, triggering memory corruption pre-authentication a...
Information disclosure
On Samsung mobile devices with L5.x, M6.0, and N7.x software, Gallery allows remote attackers to execute arbitrary code via a BMP file with a crafted resolution, aka SVE-2017-11105...
Design/Logic Flaw
On Samsung mobile devices with N7.x software, attackers can install an arbitrary APK in the Secure Folder SD Card area because of faulty validation of a package signature and package name, aka SVE-2017-10932...
Cross site scripting
On Samsung mobile devices with M6.0 software, the Email application allows XSS via an event attribute and arbitrary file loading via a src attribute, aka SVE-2017-10747...
CVE-2018-9140
On Samsung mobile devices with M6.0 software, the Email application allows XSS via an event attribute and arbitrary file loading via a src attribute, aka SVE-2017-10747...
CVE-2018-9142
On Samsung mobile devices with N7.x software, attackers can install an arbitrary APK in the Secure Folder SD Card area because of faulty validation of a package signature and package name, aka SVE-2017-10932...
CVE-2018-9139
On Samsung mobile devices with N7.x software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165...
CVE-2018-9141
On Samsung mobile devices with L5.x, M6.0, and N7.x software, Gallery allows remote attackers to execute arbitrary code via a BMP file with a crafted resolution, aka SVE-2017-11105...
Buffer overflow
On Samsung mobile devices with N7.x software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165...
Heap overflow
On Samsung mobile devices with M6.0 and N7.x software, a heap overflow in the sensorhub binder service leads to code execution in a privileged process, aka SVE-2017-10991...
CVE-2018-9143
CVE-2018-9143 affects Samsung mobile devices running Android M (6.0) and N (7.x). The vulnerability is a heap overflow in the sensorhub binder service, allowing code execution in a privileged process (SVE-2017-10991). Impact is rated high/critical (C/H/I/A) per NVD metrics. No exploitation detail...
CVE-2018-9143
On Samsung mobile devices with M6.0 and N7.x software, a heap overflow in the sensorhub binder service leads to code execution in a privileged process, aka SVE-2017-10991...
CVE-2018-9140
CVE-2018-9140 concerns Samsung mobile devices running Android M (6.0). The Email application is vulnerable to a cross-site scripting (XSS) attack via an event attribute and can load arbitrary files through a src attribute, identified as SVE-2017-10747. Connected sources (NVD/CNVD/PRION/CVELIST) c...
CVE-2018-9140
On Samsung mobile devices with M6.0 software, the Email application allows XSS via an event attribute and arbitrary file loading via a src attribute, aka SVE-2017-10747...
CVE-2018-9142
On Samsung mobile devices with N7.x software, attackers can install an arbitrary APK in the Secure Folder SD Card area because of faulty validation of a package signature and package name, aka SVE-2017-10932...
CVE-2018-9143: Out-of-bounds Write
On Samsung mobile devices with M6.0 and N7.x software, a heap overflow in the sensorhub binder service leads to code execution in a privileged process, aka SVE-2017-10991...
CVE-2018-9141: Improper Input Validation
On Samsung mobile devices with L5.x, M6.0, and N7.x software, Gallery allows remote attackers to execute arbitrary code via a BMP file with a crafted resolution, aka SVE-2017-11105...
Stack overflow
On Samsung mobile devices with N7.x software and Exynos chipsets, attackers can conduct a Trustlet stack overflow attack for arbitrary TEE code execution, in conjunction with a brute-force attack to discover unlock information PIN, password, or pattern. The Samsung ID is SVE-2017-10733...
CVE-2018-5210
On Samsung mobile devices with N7.x software and Exynos chipsets, attackers can conduct a Trustlet stack overflow attack for arbitrary TEE code execution, in conjunction with a brute-force attack to discover unlock information PIN, password, or pattern. The Samsung ID is SVE-2017-10733...
CVE-2018-5210
CVE-2018-5210 affects Samsung mobile devices running Android N (7.x) with Exynos chipsets. The vulnerability is a Trustlet stack overflow in the TEE (Trusted Execution Environment) that can lead to arbitrary code execution within TEE, reported in conjunction with a brute-force attack to obtain un...