CVE-2018-14318

CVE-2018-14318 affects Samsung Galaxy S8 (G950FXXU1AQL5). The root cause is improper validation of the length of user-supplied data in IPCP header handling, leading to a stack-based buffer overflow on the baseband processor. This allows remote code execution with the attacker needing user interac...

CVE-2018-10498

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Samsung Email Fixed in version 5.0.02.16. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific...

CVE-2018-10501

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Notes Fixed in version 2.0.02.31. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

Design/Logic Flaw

This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Samsung Members Fixed in version 2.4.25. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

Stack overflow

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S8 G950FXXU1AQL5. User interaction is required to exploit this vulnerability in that the target must have their cellular radios enabled. The specific flaw exists within the handling ...

Design/Logic Flaw

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Samsung Email Fixed in version 5.0.02.16. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific...

CVE-2018-10496

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Internet Browser Fixed in version 6.4.0.15. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...

CVE-2018-10501

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Notes Fixed in version 2.0.02.31. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

Design/Logic Flaw

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Email Fixed in version 5.0.02.16. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

CVE-2018-10497

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Email Fixed in version 5.0.02.16. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

CVE-2018-10499

The CVE-2018-10499 issue affects Samsung Galaxy Apps. It is a local-privilege-escalation due to improper validation in the URL handling path, allowing an attacker with low-privilege code execution to run arbitrary JavaScript and install apps under the current user context. The vulnerability is tr...

CVE-2018-10502

The vulnerability CVE-2018-10502 affects Samsung Galaxy Apps, where the staging mode handling allows a local attacker who can run low-privileged code to modify configuration based on a file’s presence in a user-controlled location, enabling privilege escalation to protected resources. A fix is av...

CVE-2018-10496

Samsung Internet Browser is affected by CVE-2018-10496. The flaw resides in the handling of TypedArray objects, arising from not validating the existence of an object before performing operations, enabling remote code execution under the current process when a user visits a malicious page or open...

CVE-2018-10501

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Notes Fixed in version 2.0.02.31. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

CVE-2018-10501

The CVE-2018-10501 issue affects Samsung Notes and is a local privilege-escalation vulnerability in the ZIP handling path validation. The root cause is improper validation of a user-supplied path used in file operations, enabling a local attacker to escalate privileges within the application. Aff...

CVE-2018-11614

This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Samsung Members Fixed in version 2.4.25. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

CVE-2018-10496

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Internet Browser Fixed in version 6.4.0.15. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...

CVE-2018-11614

CVE-2018-11614 affects Samsung Members. The flaw is in Intent handling that allows a reachable-intent to escalate privileges from a low-privilege context. A remote attacker with initial low-privilege code execution can escalate to protected resources. The advisory trail includes ZDI-18-562 and mu...

CVE-2018-10497

Samsung Email is affected by a local privilege-escalation vulnerability in the EML file handling. The flaw arises from insufficient validation of user-supplied data in EML parsing, enabling an attacker who can execute low-privileged code to run arbitrary JavaScript and escalate privileges to prot...

CVE-2018-10500

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Galaxy Apps Fixed in version 6.4.0.15. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...