SM
Product
Samsung Mobile
28
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 14Medium 8Low 0
Watch
Add Samsung Mobile to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-18020 | 8.4 | Jan 4 | On Samsung mobile devices with L(5.x), M(6.x), and N(7.x) software and Exynos chipsets, attackers can execute arbitrary code in the bootloader because S Boot omits a size check… Affected: 5.0; 5.1; 5.1.1; 6.0; 6.0.1; 7.0; +3 more |
| CVE-2018-5210 | 8.1 | Jan 4 | On Samsung mobile devices with N(7.x) software and Exynos chipsets, attackers can conduct a Trustlet stack overflow attack for arbitrary TEE code execution, in conjunction with a… Affected: 7.0; 7.1; 7.1.1; 7.1.2 |
| CVE-2018-9141 | 7.8 | Mar 30 | On Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software, Gallery allows remote attackers to execute arbitrary code via a BMP file with a crafted resolution, aka… Affected: 5.0; 5.1; 6.0; 7.0; 7.1; 7.1.1; +1 more |
| CVE-2016-4038 | 7.8 | Feb 1 | Array index error in the msm_sensor_config function in kernel/SM-G9008V_CHN_KK_Opensource/Kernel/drivers/media/platform/msm/camera_v2/sensor/msm_sensor.c in Samsung devices with… Affected: 4.4; 5.0; 5.1 |
| CVE-2016-6527 | 7.8 | Jan 18 | The SmartCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6.0) allows attackers to cause a denial of service (crash and reboot) or possibly… Affected: 5.0; 5.1; 6.0 |
| CVE-2016-6526 | 7.8 | Jan 18 | The SpamCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6.0) allows attackers to cause a denial of service (crash and reboot) or possibly… Affected: 5.0; 5.1; 6.0 |
| CVE-2017-7978 | 7.5 | Apr 19 | Samsung Android devices with L(5.0/5.1), M(6.0), and N(7.x) software allow attackers to obtain sensitive information by reading a world-readable log file after an unexpected… Affected: 5.0; 5.1; 6.0; 7.0; 7.1; 7.1.1; +1 more |
| CVE-2016-4547 | 7.5 | Feb 13 | Samsung devices with Android KK(4.4), L(5.0/5.1), or M(6.0) allow attackers to cause a denial of service (system crash) via a crafted system call to TvoutService_C Affected: 4.4; 5.0; 5.1; 6.0 |
| CVE-2017-5351 | 7.5 | Jan 12 | Samsung Note devices with KK(4.4), L(5.0/5.1), and M(6.0) software allow attackers to crash the system by creating an arbitrarily large number of active VR service threads Affected: 4.4; 5.0; 5.1; 6.0 |
| CVE-2017-5350 | 7.5 | Jan 12 | Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allow attackers to crash systemUI by leveraging incomplete exception handling Affected: 5.0; 5.1; 6.0; 7.0 |
| CVE-2016-9277 | 7.5 | Nov 11 | Integer overflow in SystemUI in KK(4.4) and L(5.0/5.1) on Samsung Note devices allows attackers to cause a denial of service (UI restart) via vectors involving APIs and an… Affected: 4.4; 5.0; 5.1 |
| CVE-2016-7160 | 7.5 | Nov 3 | A vulnerability on Samsung Mobile M(6.0) devices exists because external access to SystemUI activities is not properly restricted, leading to a SystemUI crash and device restart,… Affected: 6.0 |
| CVE-2018-9142 | 7.0 | Mar 30 | On Samsung mobile devices with N(7.x) software, attackers can install an arbitrary APK in the Secure Folder SD Card area because of faulty validation of a package signature and… Affected: 7.0; 7.1; 7.1.1; 7.1.2 |
| CVE-2015-7891 | 7.0 | Aug 2 | Race condition in the ioctl implementation in the Samsung Graphics 2D driver (aka /dev/fimg2d) in Samsung devices with Android L(5.0/5.1) allows local users to trigger memory… Affected: 5.0; 5.1 |
Showing 14