CVE-2018-21079

An issue was discovered on Samsung mobile devices with L5.x, M6.0, N7.x, and O8.0 software. There is a kernel pointer leak in the USB gadget driver. The Samsung ID is SVE-2017-10993 March 2018...

CVE-2018-21080

CVE-2018-21080 affects Samsung mobile devices running N(7.x). A physically proximate attacker can use a magnet to activate NFC and bypass the lockscreen (Samsung ID SVE-2017-10897). Exploitation details, affected models/versions, and fixes are not explicitly provided in the connected documents; o...

CVE-2018-21041

An issue was discovered on Samsung mobile devices with O8.x software. Access to Gallery in the Secure Folder can occur without authentication. The Samsung ID is SVE-2018-13057 December 2018...

CVE-2018-21040

CVE-2018-21040 affects Samsung mobile devices with Exynos 9810 (O(8.x)/P(9.0)). Root cause: race condition leading to a use-after-free in the g2d driver. Impact: high with CVSSv3.1 base score 8.1 (Network, Privileges None, UI None; Confidentiality/Integrity/Availability High). Exploitation status...

CVE-2018-21040

An issue was discovered on Samsung mobile devices with O8.x and P9.0 Exynos 9810 chipsets software. There is a race condition with a resultant use-after-free in the g2d driver. The Samsung ID is SVE-2018-12959 December 2018...

CVE-2018-21039

CVE-2018-21039 affects Samsung mobile devices running Android 7.0 (Nougat). The issue arises when granting Location permission to the compass feature in Quick Tools/QuickTools, enabling a lockscreen bypass. Connected sources reiterate the vulnerability but do not provide detailed root-cause analy...

CVE-2018-21038

CVE-2018-21038 concerns Samsung mobile devices running N(7.x) software, where the Secure Folder app’s startup logic permits an authentication bypass. The vulnerability is tied to the Secure Folder startup sequence, enabling bypass of authentication for affected devices (Samsung ID SVE-2018-11628)...

CVE-2020-11603

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 incorporating TEEGRIS software. Type confusion in the MLDAP Trustlet allows arbitrary code execution. The Samsung ID is SVE-2020-16599 April 2020...

CVE-2020-11606

An issue was discovered on Samsung mobile devices with Q10.0 software. Information about application preview in the Secure Folder leaks on a locked device. The Samsung ID is SVE-2019-16463 April 2020...

CVE-2020-11606

An issue was discovered on Samsung mobile devices with Q10.0 software. Information about application preview in the Secure Folder leaks on a locked device. The Samsung ID is SVE-2019-16463 April 2020...

CVE-2020-11604

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 incorporating TEEGRIS software. There is an Out-of-bounds read in the MLDAP Trustlet. The Samsung ID is SVE-2019-16565 April 2020...

CVE-2020-11602

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Google Assistant leaks clipboard contents on a locked device. The Samsung ID is SVE-2019-16558 April 2020...

Out-of-bounds

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 incorporating TEEGRIS software. There is an Out-of-bounds read in the MLDAP Trustlet. The Samsung ID is SVE-2019-16565 April 2020...

Information disclosure

An issue was discovered on Samsung mobile devices with Q10.0 software. Information about application preview in the Secure Folder leaks on a locked device. The Samsung ID is SVE-2019-16463 April 2020...

Information disclosure

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. There is sensitive information exposure from dumpstate in NFC logs. The Samsung ID is SVE-2019-16359 April 2020...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Google Assistant leaks clipboard contents on a locked device. The Samsung ID is SVE-2019-16558 April 2020...

Type confusion

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 incorporating TEEGRIS software. Type confusion in the MLDAP Trustlet allows arbitrary code execution. The Samsung ID is SVE-2020-16599 April 2020...

Code injection

An issue was discovered on Samsung mobile devices with Q10.0 software. There is arbitrary code execution in the Fingerprint Trustlet via a memory overwrite. The Samsung IDs are SVE-2019-16587, SVE-2019-16588, SVE-2019-16589 April 2020...

CVE-2020-11603

CVE-2020-11603 affects Samsung mobile devices running P(9.0) and Q(10.0) that include TEEGRIS. The issue is a type confusion in the MLDAP Trustlet, leading to arbitrary code execution. The vulnerability is identified by Samsung as SVE-2020-16599 (April 2020). Exploitation details, affected versio...

CVE-2020-11603

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 incorporating TEEGRIS software. Type confusion in the MLDAP Trustlet allows arbitrary code execution. The Samsung ID is SVE-2020-16599 April 2020...