CVE-2018-21091: Improper Handling of Exceptional Conditions

An issue was discovered on Samsung mobile devices with M6.x and N7.x software. Telecom has a System Crash via abnormal exception handling. The Samsung ID is SVE-2017-10906 January 2018...

CVE-2018-21092: Improper Input Validation

An issue was discovered on Samsung mobile devices with M6.x and N7.x software. A crafted AT command may be sent by the DeviceTest application via an NFC tag. The Samsung ID is SVE-2017-10885 January 2018...

CVE-2018-21074: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered on Samsung mobile devices with M6.x Exynos or Qualcomm chipsets software. There is information disclosure from a Trustlet via the debug log. The Samsung ID is SVE-2017-10638 April 2018...

CVE-2017-18645: Out-of-bounds Write

An issue was discovered on Samsung mobile devices with M6.x and N7.x Qualcomm chipsets software. There is a panellpm sysfs stack-based buffer overflow. The Samsung ID is SVE-2017-9414 December 2017...

CVE-2017-18644: Out-of-bounds Write

An issue was discovered on Samsung mobile devices with L5.1, M6.x, and N7.x software. There is a muicsetregsel heap-based buffer overflow during the reading of MUIC register values. The Samsung ID is SVE-2017-10011 December 2017...

Race condition

An issue was discovered on Samsung mobile devices with M6,x and N7.0 software. The TA Scrypto v1.0 implementation in Secure Driver has a race condition with a resultant buffer overflow. The Samsung IDs are SVE-2017-8973, SVE-2017-8974, and SVE-2017-8975 November 2017...

CVE-2017-18647

CVE-2017-18647 concerns Samsung mobile devices running M(6,x) and N(7.0) software. The issue lies in the TA Scrypto v1.0 implementation in Secure Driver, where a race condition can lead to a buffer overflow. Affected Samsung identifiers are SVE-2017-8973, SVE-2017-8974, and SVE-2017-8975 (Nov 201...

CVE-2017-18651: Integer Overflow or Wraparound

An issue was discovered on Samsung mobile devices with M6.x and N7.x software. There is an Integer Overflow in processMSetTokenTUIPasswd during handling of a trusted application, leading to memory corruption. The Samsung IDs are SVE-2017-9008 and SVE-2017-9009 October 2017...

CVE-2017-18648: Improper Input Validation

An issue was discovered on Samsung mobile devices with KK4.4.x, L5.x, M6.x, and N7.x software. Arbitrary file read/write operations can occur in the locked state via a crafted MTP command. The Samsung ID is SVE-2017-10086 November 2017...