CVE-2017-18663

An issue was discovered on Samsung mobile devices with N7.x software. Because of missing Intent exception handling, systemserver can have a NullPointerException with a crash of a system process. The Samsung IDs are SVE-2017-9122, SVE-2017-9123, SVE-2017-9124, and SVE-2017-9126 July 2017...

CVE-2017-18656

An issue was discovered on Samsung mobile devices with M6.0 and N7.x software. There is a buffer over-read in a trustlet. The Samsung ID is SVE-2017-8890 August 2017...

CVE-2017-18674

An issue was discovered on Samsung mobile devices with N7.0 software. The time service aka Timaservice allows a kernel panic. The Samsung ID is SVE-2017-8593 May 2017...

CVE-2019-20544

An issue was discovered on Samsung mobile devices with O8.x and P9.0 Exynos chipsets software. There is an out-of-bounds write in the ICCC Trustlet. The Samsung ID is SVE-2019-15274 November 2019...

CVE-2019-20588

An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. There is type confusion in the SEM Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14891 August 2019...

CVE-2019-20609

An issue was discovered on Samsung mobile devices with P9.0 software. Attackers can use Smartwatch to view Secure Folder notification content. The Samsung ID is SVE-2019-13899 April 2019...

CVE-2019-20564

An issue was discovered on Samsung mobile devices with any before October 2019 for S9 or Note9 software. Attackers can manipulate the IMEI. The Samsung ID is SVE-2019-15435 October 2019...

CVE-2019-20546

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Broadcom Wi-Fi chipsets software. A denial-of-service attack can leverage a shared interface between Broadcom Bluetooth and Broadcom Wi-Fi. The Samsung ID is SVE-2019-15350 November 2019...

CVE-2019-20565

An issue was discovered on Samsung mobile devices with O8.x and P9.0 software. Attackers can change the USB configuration without authentication. The Samsung ID is SVE-2018-13300 September 2019...

CVE-2019-20538

An issue was discovered on Samsung mobile devices with P9.0 software. There is a heap overflow in the knoxkap driver. The Samsung ID is SVE-2019-14857 November 2019...

CVE-2019-20561

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos chipsets software. The bootloader has an integer signedness error. The Samsung ID is SVE-2019-15230 October 2019...

CVE-2019-20615

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. Attackers can bypass Factory Reset Protection FRP via SVoice T&C.; The Samsung ID is SVE-2018-13547 March 2019...

CVE-2019-20596

An issue was discovered on Samsung mobile devices with N7.x and O8.x Exynos chipsets software. There is information disclosure in the GateKeeper Trustlet. The Samsung ID is SVE-2019-13958 June 2019...

CVE-2019-20536

An issue was discovered on Samsung mobile devices with N7.1, O8.x, and P9.0 released in China software. The Firewall application mishandles the PermissionWhiteLists protection mechanism. The Samsung ID is SVE-2019-14299 November 2019...

CVE-2020-10851

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. There is a stack overflow in the kperfmon driver. The Samsung ID is SVE-2019-15876 January 2020...

CVE-2020-10848

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 Exynos 9810 chipsets software. Arbitrary memory mapping exists in TEE. The Samsung ID is SVE-2019-16665 February 2020...

CVE-2020-10840

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 Exynos 9610 chipsets software. There is a kernel pointer leak in the vipx driver. The Samsung ID is SVE-2019-16293 February 2020...

CVE-2020-10831

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. Attackers can trigger an update to arbitrary touch-screen firmware. The Samsung ID is SVE-2019-16013 March 2020...

PT-2026-6172

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the arm64/fpsimd component related to the restoration of SVE context when SME is supported. Restoring SVE signal context can lead to an invalid state,...

PT-2026-6177

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-rc1 Description The Linux kernel contains a flaw in the arm64/fpsimd component related to signal handling and the restoration of ZA zeroed address space contexts. The code responsible for restoring a ZA...