CVE-2018-21092

An issue was discovered on Samsung mobile devices with M6.x and N7.x software. A crafted AT command may be sent by the DeviceTest application via an NFC tag. The Samsung ID is SVE-2017-10885 January 2018...

CVE-2017-18645

An issue was discovered on Samsung mobile devices with M6.x and N7.x Qualcomm chipsets software. There is a panellpm sysfs stack-based buffer overflow. The Samsung ID is SVE-2017-9414 December 2017...

CVE-2018-21089

An issue was discovered on Samsung mobile devices with N7.x MT6755/MT6757 Mediatek models software. Bootloader has an integer overflow that leads to arbitrary code execution via the download offset control. The Samsung ID is SVE-2017-10732 January 2018...

Information disclosure

An issue was discovered on Samsung mobile devices with M6.x and N7.x software. There is information disclosure of the kbasecontext address of a GPU memory node. The Samsung ID is SVE-2017-8907 December 2017...

Command injection

An issue was discovered on Samsung mobile devices with M6.x and N7.x software. A crafted AT command may be sent by the DeviceTest application via an NFC tag. The Samsung ID is SVE-2017-10885 January 2018...

Code injection

An issue was discovered on Samsung mobile devices with M6.x and N7.x software. Telecom has a System Crash via abnormal exception handling. The Samsung ID is SVE-2017-10906 January 2018...

Integer overflow

An issue was discovered on Samsung mobile devices with N7.x MT6755/MT6757 Mediatek models software. Bootloader has an integer overflow that leads to arbitrary code execution via the download offset control. The Samsung ID is SVE-2017-10732 January 2018...

Stack overflow

An issue was discovered on Samsung mobile devices with M6.x and N7.x Qualcomm chipsets software. There is a panellpm sysfs stack-based buffer overflow. The Samsung ID is SVE-2017-9414 December 2017...

Buffer overflow

An issue was discovered on Samsung mobile devices with software through 2017-11-03 S.LSI modem chipsets. The Exynos modem chipset has a baseband buffer overflow. The Samsung ID is SVE-2017-10745 January 2018...

CVE-2018-21089

CVE-2018-21089 affects Samsung mobile devices running N(7.x) on MT6755/MT6757 Mediatek chipsets. The root cause is an integer overflow in the bootloader related to the download offset control, enabling arbitrary code execution. The entry notes a Samsung ID SVE-2017-10732 (Jan 2018). Impact is des...

CVE-2018-21089

An issue was discovered on Samsung mobile devices with N7.x MT6755/MT6757 Mediatek models software. Bootloader has an integer overflow that leads to arbitrary code execution via the download offset control. The Samsung ID is SVE-2017-10732 January 2018...

CVE-2018-21091

An issue was discovered on Samsung mobile devices with M6.x and N7.x software. Telecom has a System Crash via abnormal exception handling. The Samsung ID is SVE-2017-10906 January 2018...

CVE-2018-21091

Technical details about CVE-2018-21091 are not publicly available in the provided connected documents. Monitor for updates from vendors and CERT advisories for affected Samsung devices and any published patches or mitigations.

CVE-2018-21092

An issue was discovered on Samsung mobile devices with M6.x and N7.x software. A crafted AT command may be sent by the DeviceTest application via an NFC tag. The Samsung ID is SVE-2017-10885 January 2018...

Security feature bypass

An issue was discovered on Samsung mobile devices with M6.x and N7.x software. An attacker can bypass the password requirement for tablet user switching by folding the magnetic cover. The Samsung ID is SVE-2017-10602 December 2017...

CVE-2017-18643

CVE-2017-18643 concerns information disclosure on Samsung mobile devices running M(6.x) and N(7.x) software, specifically exposure of the kbase_context address of a GPU memory node. The connected documents confirm the affected device family and the memory-context disclosure issue but do not provi...

CVE-2017-18643

An issue was discovered on Samsung mobile devices with M6.x and N7.x software. There is information disclosure of the kbasecontext address of a GPU memory node. The Samsung ID is SVE-2017-8907 December 2017...

CVE-2017-18644

An issue was discovered on Samsung mobile devices with L5.1, M6.x, and N7.x software. There is a muicsetregsel heap-based buffer overflow during the reading of MUIC register values. The Samsung ID is SVE-2017-10011 December 2017...

CVE-2017-18644

Samsung CVE-2017-18644 affects mobile devices running L(5.1), M(6.x), and N(7.x). The issue is a heap-based buffer overflow in muic_set_reg_sel when reading MUIC register values (root cause). The Samsung ID is SVE-2017-10011. No fixes or mitigations are detailed in the provided documents; referen...

CVE-2017-18645

An issue was discovered on Samsung mobile devices with M6.x and N7.x Qualcomm chipsets software. There is a panellpm sysfs stack-based buffer overflow. The Samsung ID is SVE-2017-9414 December 2017...