CVE-2018-21057

An issue was discovered on Samsung mobile devices with N7.x O8.x, and P9.0 Exynos chipsets software. There is a stack-based buffer overflow in the Shannon Baseband. The Samsung ID is SVE-2018-12757 September 2018...

CVE-2018-21058

An issue was discovered on Samsung mobile devices with N7.0, O8.0 exynos7420 or Exynos 8890/8996 chipsets software. Cache attacks can occur against the Keymaster AES-GCM implementation because T-Tables are used; the Cryptography Extension CE is not used. The Samsung ID is SVE-2018-12761 September...

CVE-2018-21059

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. There is Clipboard content visibility in the locked state via the emergency contact picker. The Samsung ID is SVE-2018-11806 September 2018...

CVE-2018-21045

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. There is Clipboard access in the lockscreen state via a copy-and-paste action. The Samsung ID is SVE-2018-13381 December 2018...

CVE-2018-21042

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. Dual Messenger allows installation of an arbitrary APK with resultant privileged code execution. The Samsung ID is SVE-2018-13299 December 2018...

Default credentials

An issue was discovered on Samsung mobile devices with O8.0 software. Execution of an application in a locked Secure Folder can occur without a password via a split screen. The Samsung ID is SVE-2018-11669 July 2018...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with N7.1 and O8.x software. A fake charger can execute critical functions in the locked state. The Samsung ID is SVE-2016-6341 August 2018...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with M6.0, N7.x, and O8.0 Exynos chipsets software. A kernel driver allows out-of-bounds Read/Write operations and possibly arbitrary code execution. The Samsung ID is SVE-2018-11358 May 2018...

Buffer overflow

An issue was discovered on Samsung mobile devices with N7.x and O8.0 software. The sem Trustlet has a buffer overflow that leads to arbitrary TEE code execution. The Samsung IDs are SVE-2018-13230, SVE-2018-13231, SVE-2018-13232, SVE-2018-13233 December 2018...

Code injection

An issue was discovered on Samsung mobile devices with M6.0, N7.x, and O8.x Exynos chipsets software. Keymaster has an architectural problem because tlApi in TEE is not properly protected. The Samsung ID is SVE-2018-11792 August 2018...

Code injection

An issue was discovered on Samsung mobile devices with N7.x software. A physically proximate attacker wielding a magnet can activate NFC to bypass the lockscreen. The Samsung ID is SVE-2017-10897 March 2018...

Buffer overflow

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. There is an array overflow in a driver's input booster. The Samsung ID is SVE-2017-11816 August 2018...

Input validation

An issue was discovered on Samsung mobile devices with N7.x and O8.X Exynos chipsets software. There is incorrect usage of shared memory in the vaultkeeper Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2018-12855 October 2018...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. There is a Keyboard learned words leak in the locked state via the emergency contact picker. The Samsung IDs are SVE-2018-11989, SVE-2018-11990 September 2018...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with L5.x, M6.0, N7.x, and O8.0 software. There is a kernel pointer leak in the USB gadget driver. The Samsung ID is SVE-2017-10993 March 2018...

Information disclosure

An issue was discovered on Samsung mobile devices with M6.0 software. There is an information disclosure in a Trustlet because an address is logged. The Samsung ID is SVE-2018-11600 July 2018...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with O8.x software. There is a Notification leak on a locked device in Standalone Dex mode. The Samsung ID is SVE-2018-12925 November 2018...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. The Call+ application can load classes from an unintended path, leading to Code Execution. The Samsung ID is SVE-2017-10886 April 2018...

Integer overflow

An issue was discovered on Samsung mobile devices with M6.0, N7.x, and O8.x software. There is an integer underflow in eCryptFS because of a missing size check. The Samsung ID is SVE-2017-11855 August 2018...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with N7.0, O8.0 exynos7420 or Exynos 8890/8996 chipsets software. Cache attacks can occur against the Keymaster AES-GCM implementation because T-Tables are used; the Cryptography Extension CE is not used. The Samsung ID is SVE-2018-12761 September...