Code injection

Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 Galaxy S6 devices allows attackers to read sent e-mail messages, aka SVE-2015-5081...

CVE-2016-2566

The CVE-2016-2566 entry concerns Samsung SecEmailSync on Galaxy S6 (SM-G920F, build G920FXXU2COH2). Connected documents confirm a SQL injection in the SecEmailSync plugin (SVE-2015-5081). Reported impact in CNVD sources states an attacker could exploit this to read e-mails; the CNVD-2017-07204 en...

CVE-2016-4030

Technical details for CVE-2016-4030 are not publicly provided in the supplied documents. The Connected documents do not contain product/version/root-cause/impact/remediation for this CVE. Monitor for updates from official advisories and vendor advisories.

CVE-2016-2036

The CVE-2016-2036 entry concerns the getURL function in drivers/secfilter/urlparser.c within the Samsung kernel’s secfilter component for Android on SM-N9005 (Note 3) and SM-G920F (Galaxy S6). The underlying issue is a NULL pointer dereference triggered by a crafted GET HTTP/1.1 request (SVE-2016...

CVE-2016-2566

Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 Galaxy S6 devices has SQL injection, aka SVE-2015-5081...

CVE-2016-2565

The connected records corroborate that Samsung SecEmailSync on the Galaxy S6 (Samsung SM-G920F, build G920FXXU2COH2) contains a vulnerability class in the SecEmailSync plugin. CNVD entries describe two concrete issues: (1) CVE-2016-2565/2566 family in SecEmailSync, with an SQL injection vector (S...

CVE-2016-4030

Samsung SM-G920F build G920FXXU2COH2 Galaxy S6, SM-N9005 build N9005XXUGBOK6 Galaxy Note 3, GT-I9192 build I9192XXUBNB1 Galaxy S4 mini, GT-I9195 build I9195XXUCOL1 Galaxy S4 mini LTE, and GT-I9505 build I9505XXUHOJ2 Galaxy S4 devices have unintended availability of the modem in USB configuration...

CVE-2016-2566: Improper Neutralization of Special Elements used in an SQL Command

Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 Galaxy S6 devices has SQL injection, aka SVE-2015-5081...

CVE-2016-4030: Improper Access Control

Samsung SM-G920F build G920FXXU2COH2 Galaxy S6, SM-N9005 build N9005XXUGBOK6 Galaxy Note 3, GT-I9192 build I9192XXUBNB1 Galaxy S4 mini, GT-I9195 build I9195XXUCOL1 Galaxy S4 mini LTE, and GT-I9505 build I9505XXUHOJ2 Galaxy S4 devices have unintended availability of the modem in USB configuration...

Out-of-bounds

The kbasedispatch function in arm/t7xx/r5p0/malikbasecorelinux.c in the GPU driver on Samsung devices with M6.0 and N7.0 software and Exynos AP chipsets allows attackers to have unspecified impact via unknown vectors, which trigger an out-of-bounds read, aka SVE-2016-6362...

CVE-2017-5538

The kbasedispatch function in arm/t7xx/r5p0/malikbasecorelinux.c in the GPU driver on Samsung devices with M6.0 and N7.0 software and Exynos AP chipsets allows attackers to have unspecified impact via unknown vectors, which trigger an out-of-bounds read, aka SVE-2016-6362...

CVE-2017-5538

The kbasedispatch function in arm/t7xx/r5p0/malikbasecorelinux.c in the GPU driver on Samsung devices with M6.0 and N7.0 software and Exynos AP chipsets allows attackers to have unspecified impact via unknown vectors, which trigger an out-of-bounds read, aka SVE-2016-6362...

CVE-2017-5538

CVE-2017-5538 affects Samsung devices running M(6.0)/N(7.0) with Exynos AP; vulnerable component is the GPU driver Mali kernel code (kbase_dispatch in arm/t7xx/r5p0/mali_kbase_core_linux.c). The issue is an out-of-bounds read triggered via unknown vectors, with unspecified impact. Exploitation de...

CVE-2016-6604

NULL pointer dereference in Samsung Exynos fimg2d driver for Android L5.0/5.1 and M6.0 allows attackers to have unspecified impact via unknown vectors. The Samsung ID is SVE-2016-6382...

CVE-2016-6604

NULL pointer dereference in Samsung Exynos fimg2d driver for Android L5.0/5.1 and M6.0 allows attackers to have unspecified impact via unknown vectors. The Samsung ID is SVE-2016-6382...

CVE-2016-6604: NULL Pointer Dereference

NULL pointer dereference in Samsung Exynos fimg2d driver for Android L5.0/5.1 and M6.0 allows attackers to have unspecified impact via unknown vectors. The Samsung ID is SVE-2016-6382...

CVE-2016-9278

The Samsung Exynos fimg2d driver for Android with Exynos 5433, 54xx, or 7420 chipsets allows local users to cause a denial of service kernel panic via a crafted ioctl command. The Samsung ID is SVE-2016-6736...

CVE-2016-9279

CVE-2016-9279 describes a use-after-free vulnerability in the Samsung Exynos fimg2d driver used by Android on Exynos 5433, 54xx, and 7420 chipsets. The underlying issue is a use-after-free condition in the fimg2d driver that could allow a nearby attacker to obtain sensitive information via unspec...

CVE-2016-9278

Affected component: Samsung Exynos fimg2d driver in Android on Exynos 5433, 54xx, and 7420 chipsets. Vulnerability arises from a crafted ioctl command that can trigger a kernel panic (local denial of service). The CVE is documented across multiple sources (NVD/NVL/RH/etc.) with a MEDIUM base scor...

CVE-2016-9278

The Samsung Exynos fimg2d driver for Android with Exynos 5433, 54xx, or 7420 chipsets allows local users to cause a denial of service kernel panic via a crafted ioctl command. The Samsung ID is SVE-2016-6736...