CVE-2017-18650

An issue was discovered on Samsung mobile devices with N7.x software. There is a WifiStateMachine IllegalArgumentException and reboot if a malformed wpasupplicant.conf is read. The Samsung ID is SVE-2017-9828 October 2017...

CVE-2017-18651

An issue was discovered on Samsung mobile devices with M6.x and N7.x software. There is an Integer Overflow in processMSetTokenTUIPasswd during handling of a trusted application, leading to memory corruption. The Samsung IDs are SVE-2017-9008 and SVE-2017-9009 October 2017...

CVE-2017-18652

An issue was discovered on Samsung mobile devices with M6.0 and N7.x software. SVoice allows arbitrary code execution by changing dynamic libraries. The Samsung ID is SVE-2017-9299 September 2017...

CVE-2017-18653

CVE-2017-18653 affects Samsung mobile devices running KK (4.4), L (5.0/5.1), M (6.0), and N (7.x). The Email application is vulnerable to an attack via a broadcasted intent that allows an attacker to send emails on behalf of any user. The issue is identified by Samsung as SVE-2017-9357 (Sept 2017...

CVE-2017-18653

An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, M6.0, and N7.x software. The Email application allows attackers to send emails on behalf of any user via a broadcasted intent. The Samsung ID is SVE-2017-9357 September 2017...

CVE-2017-18654

An issue was discovered on Samsung mobile devices with M6.0 and N7.0, 7.1 software. An unauthenticated attacker can register a new security certificate. The Samsung ID is SVE-2017-9659 September 2017...

CVE-2017-18654

CVE-2017-18654 affects Samsung mobile devices on M (6.0) and N (7.0/7.1). The vulnerability allows an unauthenticated attacker to register a new security certificate. The provided documents do not specify the affected component, root cause details, or a concrete remediation/patch version. Connect...

CVE-2017-18655

CVE-2017-18655 affects Samsung mobile devices running M(6.0) and N(7.x) software. A stack-based buffer overflow in a trustlet leads to memory corruption. Affected component: trustlet; root cause: stack-based buffer overflow. Impact per sources: partial confidentiality, integrity, and availability...

CVE-2017-18655

An issue was discovered on Samsung mobile devices with M6.0 and N7.x software. There is a stack-based buffer overflow with resultant memory corruption in a trustlet. The Samsung IDs are SVE-2017-8889, SVE-2017-8891, and SVE-2017-8892 August 2017...

CVE-2017-18656

An issue was discovered on Samsung mobile devices with M6.0 and N7.x software. There is a buffer over-read in a trustlet. The Samsung ID is SVE-2017-8890 August 2017...

CVE-2017-18656

CVE-2017-18656 describes a buffer over-read in a trustlet on Samsung mobile devices running M(6.0) and N(7.x). Affected component is the trustlet; root cause is a buffer over-read. The issue has been reported across multiple sources (NVD, Red Hat CVE page, CVE records) with the Samsung ID SVE-201...

CVE-2017-18657

An issue was discovered on Samsung mobile devices with M6.0 and N7.x software. There is an arbitrary write in a trustlet. The Samsung ID is SVE-2017-8893 August 2017...

CVE-2017-18657

CVE-2017-18657 concerns Samsung mobile devices running M(6.0)/N(7.x) software. The issue is an arbitrary write in a trustlet (Samsung ID SVE-2017-8893). Connected documents (Red Hat, NVD/NVD mirror, CVE lists) corroborate the same root cause description, with no publicly detailed exploit or affec...

CVE-2017-18658

An issue was discovered on Samsung mobile devices with M6.0 software. The multiwindowfacade API allows attackers to cause a NullPointerException and system halt via an attempted screen touch of a non-existing display. The Samsung ID is SVE-2017-9383 August 2017...

CVE-2017-18659

An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, M6.0, and N7.x software. Attackers can crash system processes via a broadcast to AdaptiveDisplayColorService. The Samsung ID is SVE-2017-8290 July 2017...

CVE-2017-18659

CVE-2017-18659 affects Samsung mobile devices running KK (4.4), L (5.0/5.1), M (6.0), and N (7.x). Multiple sources (NVD entry and Red Hat advisory) describe an issue where attackers can crash system processes by sending a broadcast to AdaptiveDisplayColorService. The vulnerability is device/syst...

CVE-2017-18660

An issue was discovered on Samsung mobile devices with M6.0 and N7.x software. There is a buffer overflow in tlcserver. The Samsung ID is SVE-2017-8888 July 2017...

CVE-2017-18660

CVE-2017-18660 affects Samsung mobile devices running M(6.0) and N(7.x). The root cause is a buffer overflow in tlc_server, identified with Samsung SVE-2017-8888. CVSS v3.1 base score 9.8 (CRITICAL) with NETWORK attack vector, no privileges required, no user interaction, and impacts to confidenti...

CVE-2017-18661

An issue was discovered on Samsung mobile devices with M6.0 and N7.x software. There is a buffer overflow in processciphertdea. The Samsung ID is SVE-2017-8973 July 2017...

CVE-2017-18662

CVE-2017-18662 affects Samsung mobile devices running M (6.0) and N (7.x). The issue occurs when data outside the rkp log buffer boundary is read, leading to an information leak. Connected sources corroborate a Samsung-specific vulnerability (SVE-2017-9109). The Red Hat and CVE records align on t...