CVE-2018-21090: Buffer Copy without Checking Size of Input

An issue was discovered on Samsung mobile devices with software through 2017-11-03 S.LSI modem chipsets. The Exynos modem chipset has a baseband buffer overflow. The Samsung ID is SVE-2017-10745 January 2018...

CVE-2018-21083: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered on Samsung mobile devices with M6.0, N7.x, and O8.0 Exynos or Qualcomm chipsets software. There is information disclosure of a kernel address via trustonictee. The Samsung ID is SVE-2017-11175 February 2018...

PT-2020-8684

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x and P9.0 Exynos 9810 chipsets software Description A race condition with a resultant use-after-free in the g2d driver was discovered. This issue affects Samsung mobile devices with specific software versions...

PT-2020-8693

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N7.x and O8.X Exynos chipsets software Description An issue was discovered that allows for an arbitrary memory write in a Trustlet. This occurs because a secure driver permits access to sensitive APIs. Recommendatio...

PT-2020-8694

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N7.x and O8.X Exynos chipsets software Description An issue was discovered that leads to a buffer overflow in the esecomm Trustlet, resulting in arbitrary code execution. Recommendations For Samsung mobile devices...

PT-2020-8734

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with software through 2017-11-03 Description An issue was discovered in the Exynos modem chipset, which has a baseband buffer overflow. Recommendations For Samsung mobile devices with software through 2017-11-03, update...

CVE-2018-21072: Out-of-bounds Read

An issue was discovered on Samsung mobile devices with M6.0, N7.x, and O8.0 Exynos chipsets software. A kernel driver allows out-of-bounds Read/Write operations and possibly arbitrary code execution. The Samsung ID is SVE-2018-11358 May 2018...

CVE-2018-21049: Out-of-bounds Write

An issue was discovered on Samsung mobile devices with N7.x and O8.X Exynos chipsets software. There is an arbitrary memory write in a Trustlet because a secure driver allows access to sensitive APIs. The Samsung ID is SVE-2018-12881 November 2018...

PT-2020-8701

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N7.x Samsung mobile devices with O8.x Samsung mobile devices with P9.0 Description An issue was discovered in Samsung mobile devices with Exynos chipsets, specifically a stack-based buffer overflow in the Shannon...

CVE-2018-21066: Buffer Copy without Checking Size of Input

An issue was discovered on Samsung mobile devices with M6.0 Exynos or MediaTek chipsets software. There is a buffer overflow in a Trustlet that can cause memory corruption. The Samsung ID is SVE-2018-11599 July 2018...

CVE-2018-21057: Out-of-bounds Write

An issue was discovered on Samsung mobile devices with N7.x O8.x, and P9.0 Exynos chipsets software. There is a stack-based buffer overflow in the Shannon Baseband. The Samsung ID is SVE-2018-12757 September 2018...

CVE-2018-21074: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered on Samsung mobile devices with M6.x Exynos or Qualcomm chipsets software. There is information disclosure from a Trustlet via the debug log. The Samsung ID is SVE-2017-10638 April 2018...

CVE-2018-21050: Buffer Copy without Checking Size of Input

An issue was discovered on Samsung mobile devices with N7.x and O8.X Exynos chipsets software. There is a Buffer overflow in the esecomm Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2018-12852 October 2018...

CVE-2018-21043: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered on Samsung mobile devices with O8.x and P9.0 Exynos 9810 chipsets software. There is information disclosure about a kernel pointer in the g2ddrv driver because of logging. The Samsung ID is SVE-2018-13035 December 2018...

CVE-2018-21058: Use of a Broken or Risky Cryptographic Algorithm

An issue was discovered on Samsung mobile devices with N7.0, O8.0 exynos7420 or Exynos 8890/8996 chipsets software. Cache attacks can occur against the Keymaster AES-GCM implementation because T-Tables are used; the Cryptography Extension CE is not used. The Samsung ID is SVE-2018-12761 September...

CVE-2018-21063: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with M6.0, N7.x, and O8.x Exynos chipsets software. Keymaster has an architectural problem because tlApi in TEE is not properly protected. The Samsung ID is SVE-2018-11792 August 2018...

CVE-2018-21052: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on Samsung mobile devices with N7.x and O8.X Exynos chipsets software. There is incorrect usage of shared memory in the vaultkeeper Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2018-12855 October 2018...

CVE-2018-21040: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered on Samsung mobile devices with O8.x and P9.0 Exynos 9810 chipsets software. There is a race condition with a resultant use-after-free in the g2d driver. The Samsung ID is SVE-2018-12959 December 2018...

Samsung Mobile Device Buffer Overflow Vulnerability (CNVD-2020-31531)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. A buffer overflow vulnerability exists in the 'memcpy' function of the OTP service in Samsung mobile devices powered by the Exynos AP chipset, which stems from a failure to perform...

CVE-2017-18689

An issue was discovered on Samsung mobile devices with M6.0 and N7.0 Exynos5433, Exynos7420, or Exynos7870 chipsets software. An attacker can bypass a ko aka Kernel Module signature by modifying the count of kernel modules. The Samsung ID is SVE-2016-7466 January 2017...