SM
Product
Samsung Mobile
28
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 14Medium 8Low 0
Watch
Add Samsung Mobile to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-9143 | 9.8 | Mar 30 | On Samsung mobile devices with M(6.0) and N(7.x) software, a heap overflow in the sensorhub binder service leads to code execution in a privileged process, aka SVE-2017-10991 Affected: 6.0; 7.0; 7.1; 7.1.1; 7.1.2 |
| CVE-2018-9139 | 9.8 | Mar 30 | On Samsung mobile devices with N(7.x) software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165 Affected: 7.0; 7.1; 7.1.1; 7.1.2 |
| CVE-2017-5538 | 9.8 | Mar 23 | The kbase_dispatch function in arm/t7xx/r5p0/mali_kbase_core_linux.c in the GPU driver on Samsung devices with M(6.0) and N(7.0) software and Exynos AP chipsets allows attackers… Affected: 6.0; 7.0 |
| CVE-2016-9967 | 9.8 | Dec 16 | Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash… Affected: 5.0; 5.1; 6.0; 7.0 |
| CVE-2016-9966 | 9.8 | Dec 16 | Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash… Affected: 5.0; 5.1; 6.0; 7.0 |
| CVE-2016-9965 | 9.8 | Dec 16 | Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash… Affected: 5.0; 5.1; 6.0; 7.0 |
| CVE-2017-18020 | 8.4 | Jan 4 | On Samsung mobile devices with L(5.x), M(6.x), and N(7.x) software and Exynos chipsets, attackers can execute arbitrary code in the bootloader because S Boot omits a size check… Affected: 5.0; 5.1; 5.1.1; 6.0; 6.0.1; 7.0; +3 more |
| CVE-2018-5210 | 8.1 | Jan 4 | On Samsung mobile devices with N(7.x) software and Exynos chipsets, attackers can conduct a Trustlet stack overflow attack for arbitrary TEE code execution, in conjunction with a… Affected: 7.0; 7.1; 7.1.1; 7.1.2 |
| CVE-2018-9141 | 7.8 | Mar 30 | On Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software, Gallery allows remote attackers to execute arbitrary code via a BMP file with a crafted resolution, aka… Affected: 5.0; 5.1; 6.0; 7.0; 7.1; 7.1.1; +1 more |
| CVE-2016-4038 | 7.8 | Feb 1 | Array index error in the msm_sensor_config function in kernel/SM-G9008V_CHN_KK_Opensource/Kernel/drivers/media/platform/msm/camera_v2/sensor/msm_sensor.c in Samsung devices with… Affected: 4.4; 5.0; 5.1 |
| CVE-2016-6527 | 7.8 | Jan 18 | The SmartCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6.0) allows attackers to cause a denial of service (crash and reboot) or possibly… Affected: 5.0; 5.1; 6.0 |
| CVE-2016-6526 | 7.8 | Jan 18 | The SpamCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6.0) allows attackers to cause a denial of service (crash and reboot) or possibly… Affected: 5.0; 5.1; 6.0 |
| CVE-2017-7978 | 7.5 | Apr 19 | Samsung Android devices with L(5.0/5.1), M(6.0), and N(7.x) software allow attackers to obtain sensitive information by reading a world-readable log file after an unexpected… Affected: 5.0; 5.1; 6.0; 7.0; 7.1; 7.1.1; +1 more |
| CVE-2016-4547 | 7.5 | Feb 13 | Samsung devices with Android KK(4.4), L(5.0/5.1), or M(6.0) allow attackers to cause a denial of service (system crash) via a crafted system call to TvoutService_C Affected: 4.4; 5.0; 5.1; 6.0 |
| CVE-2017-5351 | 7.5 | Jan 12 | Samsung Note devices with KK(4.4), L(5.0/5.1), and M(6.0) software allow attackers to crash the system by creating an arbitrarily large number of active VR service threads Affected: 4.4; 5.0; 5.1; 6.0 |
| CVE-2017-5350 | 7.5 | Jan 12 | Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allow attackers to crash systemUI by leveraging incomplete exception handling Affected: 5.0; 5.1; 6.0; 7.0 |
| CVE-2016-9277 | 7.5 | Nov 11 | Integer overflow in SystemUI in KK(4.4) and L(5.0/5.1) on Samsung Note devices allows attackers to cause a denial of service (UI restart) via vectors involving APIs and an… Affected: 4.4; 5.0; 5.1 |
| CVE-2016-7160 | 7.5 | Nov 3 | A vulnerability on Samsung Mobile M(6.0) devices exists because external access to SystemUI activities is not properly restricted, leading to a SystemUI crash and device restart,… Affected: 6.0 |
| CVE-2018-9142 | 7.0 | Mar 30 | On Samsung mobile devices with N(7.x) software, attackers can install an arbitrary APK in the Secure Folder SD Card area because of faulty validation of a package signature and… Affected: 7.0; 7.1; 7.1.1; 7.1.2 |
| CVE-2015-7891 | 7.0 | Aug 2 | Race condition in the ioctl implementation in the Samsung Graphics 2D driver (aka /dev/fimg2d) in Samsung devices with Android L(5.0/5.1) allows local users to trigger memory… Affected: 5.0; 5.1 |
| CVE-2015-7896 | 6.5 | Aug 24 | LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service (memory corruption and SIGSEGV) via a crafted image file Affected: 5.0; 5.0.1; 5.0.2; 5.1; 5.1.1; 6.0; +5 more |
| CVE-2018-9140 | 6.1 | Mar 30 | On Samsung mobile devices with M(6.0) software, the Email application allows XSS via an event attribute and arbitrary file loading via a src attribute, aka SVE-2017-10747 Affected: 6.0 |
| CVE-2015-7898 | 5.5 | Jun 27 | Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service (process crash) Affected: All versions, or not specified |
| CVE-2015-7895 | 5.5 | Jun 27 | Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service (process crash) Affected: All versions, or not specified |
| CVE-2016-4546 | 5.5 | Feb 13 | Samsung devices with Android KK(4.4) or L(5.0/5.1) allow local users to cause a denial of service (IAndroidShm service crash) via crafted data in a service call Affected: 4.4; 5.0; 5.1 |
| CVE-2017-5217 | 5.5 | Jan 9 | Installing a zero-permission Android application on certain Samsung Android devices with KK(4.4), L(5.0/5.1), and M(6.0) software can continually crash the system_server process… Affected: 4.4; 5.0; 5.1; 6.0 |
| CVE-2016-9567 | 5.5 | Nov 23 | The mDNIe system service on Samsung Mobile S7 devices with M(6.0) software does not properly restrict setmDNIeScreenCurtain API calls, enabling attackers to control a device's… Affected: 6.0 |
| CVE-2018-10751 | 5.3 | May 29 | A malformed OMACP WAP push message can cause memory corruption on a Samsung S7 Edge device when processing the String Extension portion of the WbXml payload Affected: 6.0; 7.0; 7.1; 7.1.1; 7.1.2 |
Showing 28