Stack overflow

An issue was discovered on Samsung mobile devices with any before September 2019 for SMP1300 Exynos modem chipsets software. Attackers can trigger stack corruption in the Shannon modem via a crafted RP-Originator/Destination address. The Samsung ID is SVE-2019-14858 September 2019...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. Attackers can bypass Factory Reset Protection FRP via a Class 0 Type Message. The Samsung ID is SVE-2019-14941 October 2019...

Heap overflow

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos chipsets software. A upparm heap overflow leads to code execution in the bootloader. The Samsung ID is SVE-2019-14993 September 2019...

Buffer overflow

An issue was discovered on Samsung mobile devices with O8.1 and P9.0 Exynos chipsets software. loadkernel has a buffer overflow via untrusted data. The Samsung ID is SVE-2019-14939 September 2019...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with P9.0 software. Attackers can bypass Factory Reset Protection FRP via an RCS call. The Samsung ID is SVE-2019-15035 October 2019...

Race condition

An issue was discovered on Samsung mobile devices with O8.x and P9.0 devices Exynos and Qualcomm chipsets software. A race condition causes a Use-After-Free. The Samsung ID is SVE-2019-15067 September 2019...

Buffer overflow

An issue was discovered on Samsung mobile devices with P9.0 with TEEGRIS software. There is a buffer overflow in the BIOSUB Trustlet. The Samsung ID is SVE-2019-15264 October 2019...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. Attackers can bypass Factory Reset Protection FRP via a SIM card by blocking the PUK code. The Samsung ID is SVE-2019-15262 October 2019...

Type confusion

An issue was discovered on Samsung mobile devices with O8.x with TEEGRIS software. There is type confusion in the WVDRM Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14885 September 2019...

Authentication flaw

An issue was discovered on Samsung mobile devices with O8.x and P9.0 software. Attackers can change the USB configuration without authentication. The Samsung ID is SVE-2018-13300 September 2019...

Type confusion

An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. There is type confusion in the SECFR Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14851 August 2019...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with P9.0 software. Attackers can bypass Factory Reset Protection FRP via the status bar. The Samsung ID is SVE-2019-15089 September 2019...

Memory corruption

An issue was discovered on Samsung mobile devices with P9.0 SM6150, SM8150, SM8150FUSION, exynos7885, exynos9610, and exynos9820 chipsets software. RKP memory corruption allows attackers to control the effective address in EL2. The Samsung ID is SVE-2019-15221 October 2019...

Out-of-bounds

An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. The BIOSUB Trustlet has an out of bounds write. The Samsung ID is SVE-2019-15261 October 2019...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with P9.0 SM6150, SM8150, SM8150FUSION, exynos7885, exynos9610, and exynos9820 chipsets software. Arbitrary memory read and write operations can occur in RKP. The Samsung ID is SVE-2019-15143 October 2019...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with P9.0 software. The WPA3 handshake feature allows a downgrade or dictionary attack. The Samsung ID is SVE-2019-14204 August 2019...

Buffer overflow

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos chipsets software. There is a Buffer Overflow in the Touch Screen Driver. The Samsung ID is SVE-2019-14990 October 2019...

Integer overflow

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos chipsets software. The bootloader has an integer signedness error. The Samsung ID is SVE-2019-15230 October 2019...

Type confusion

An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. There is type confusion in the EXTFR Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14847 August 2019...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with O8.x software. Attackers can bypass Factory Reset Protection FRP via an external keyboard. The Samsung ID is SVE-2019-15164 October 2019...