samsung Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/samsung/ Sun, 26 Feb 2023 06:48:52 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png samsung Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/samsung/ 32 32 CVE-2018-21076 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-21076/ Sun, 26 Feb 2023 06:48:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-21076/ An issue was discovered on Samsung mobile devices with N(7.x) (Exynos8890/8895 chipsets) software. There is information disclosure (a KASLR offset) in the Secure Driver via a modified trustlet. The Samsung ID is SVE-2017-10987 (April 2018).

The post CVE-2018-21076 appeared first on CVE Vulnerability.

]]> An issue was discovered on Samsung mobile devices with N(7.x) (Exynos8890/8895 chipsets) software. There is information disclosure (a KASLR offset) in the Secure Driver via a modified trustlet. The Samsung ID is SVE-2017-10987 (April 2018).

The post CVE-2018-21076 appeared first on CVE Vulnerability.

]]> CVE-2018-21040 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-21040/ Sun, 26 Feb 2023 06:48:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-21040/ An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 9810 chipsets) software. There is a race condition with a resultant use-after-free in the g2d driver. The Samsung ID is SVE-2018-12959 (December 2018).

The post CVE-2018-21040 appeared first on CVE Vulnerability.

]]> An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 9810 chipsets) software. There is a race condition with a resultant use-after-free in the g2d driver. The Samsung ID is SVE-2018-12959 (December 2018).

The post CVE-2018-21040 appeared first on CVE Vulnerability.

]]> CVE-2018-21043 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-21043/ Sun, 26 Feb 2023 06:48:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-21043/ An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 9810 chipsets) software. There is information disclosure about a kernel pointer in the g2d_drv driver because of logging. The Samsung ID is SVE-2018-13035 (December 2018).

The post CVE-2018-21043 appeared first on CVE Vulnerability.

]]> An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 9810 chipsets) software. There is information disclosure about a kernel pointer in the g2d_drv driver because of logging. The Samsung ID is SVE-2018-13035 (December 2018).

The post CVE-2018-21043 appeared first on CVE Vulnerability.

]]> CVE-2018-21058 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-21058/ Sun, 26 Feb 2023 06:48:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-21058/ An issue was discovered on Samsung mobile devices with N(7.0), O(8.0) (exynos7420 or Exynos 8890/8996 chipsets) software. Cache attacks can occur against the Keymaster AES-GCM implementation because T-Tables are used; the Cryptography Extension (CE) is not used. The Samsung ID is SVE-2018-12761 (September 2018).

The post CVE-2018-21058 appeared first on CVE Vulnerability.

]]> An issue was discovered on Samsung mobile devices with N(7.0), O(8.0) (exynos7420 or Exynos 8890/8996 chipsets) software. Cache attacks can occur against the Keymaster AES-GCM implementation because T-Tables are used; the Cryptography Extension (CE) is not used. The Samsung ID is SVE-2018-12761 (September 2018).

The post CVE-2018-21058 appeared first on CVE Vulnerability.

]]> CVE-2018-21073 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-21073/ Sun, 26 Feb 2023 06:48:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-21073/ An issue was discovered on Samsung mobile devices with N(7.x) and O(8.0) (Galaxy S9+, Galaxy S9, Galaxy S8+, Galaxy S8, Note 8). There is access to Clipboard content in the locked state via the Edge panel. The Samsung ID is SVE-2017-10748 (May 2018).

The post CVE-2018-21073 appeared first on CVE Vulnerability.

]]> An issue was discovered on Samsung mobile devices with N(7.x) and O(8.0) (Galaxy S9+, Galaxy S9, Galaxy S8+, Galaxy S8, Note 8). There is access to Clipboard content in the locked state via the Edge panel. The Samsung ID is SVE-2017-10748 (May 2018).

The post CVE-2018-21073 appeared first on CVE Vulnerability.

]]> CVE-2018-14318 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-14318/ Sun, 26 Feb 2023 06:46:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-14318/ This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S8 G950FXXU1AQL5. User interaction is required to exploit this vulnerability in that the target must have their cellular radios enabled. The specific flaw exists within the handling of IPCP headers. The issue results from the lack of proper validation of […]

The post CVE-2018-14318 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S8 G950FXXU1AQL5. User interaction is required to exploit this vulnerability in that the target must have their cellular radios enabled. The specific flaw exists within the handling of IPCP headers. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to execute code under the context of the baseband processor. Was ZDI-CAN-5368.

The post CVE-2018-14318 appeared first on CVE Vulnerability.

]]> CVE-2018-12037 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-12037/ Sun, 26 Feb 2023 06:45:30 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-12037/ An issue was discovered on Samsung 840 EVO and 850 EVO devices (only in “ATA high” mode, not vulnerable in “TCG” or “ATA max” mode), Samsung T3 and T5 portable drives, and Crucial MX100, MX200 and MX300 devices. Absence of a cryptographic link between the password and the Disk Encryption Key allows attackers with privileged […]

The post CVE-2018-12037 appeared first on CVE Vulnerability.

]]> An issue was discovered on Samsung 840 EVO and 850 EVO devices (only in “ATA high” mode, not vulnerable in “TCG” or “ATA max” mode), Samsung T3 and T5 portable drives, and Crucial MX100, MX200 and MX300 devices. Absence of a cryptographic link between the password and the Disk Encryption Key allows attackers with privileged access to SSD firmware full access to encrypted data.

The post CVE-2018-12037 appeared first on CVE Vulnerability.

]]> CVE-2018-12038 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-12038/ Sun, 26 Feb 2023 06:45:30 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-12038/ An issue was discovered on Samsung 840 EVO devices. Vendor-specific commands may allow access to the disk-encryption key.

The post CVE-2018-12038 appeared first on CVE Vulnerability.

]]> An issue was discovered on Samsung 840 EVO devices. Vendor-specific commands may allow access to the disk-encryption key.

The post CVE-2018-12038 appeared first on CVE Vulnerability.

]]> CVE-2020-8860 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-8860/ Sun, 26 Feb 2023 06:43:33 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-8860/ This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S10 Firmware G973FXXS3ASJA, O(8.x), P(9.0), Q(10.0) devices with Exynos chipsets. User interaction is required to exploit this vulnerability in that the target must answer a phone call. The specific flaw exists within the Call Control Setup messages. The issue results […]

The post CVE-2020-8860 appeared first on CVE Vulnerability.

]]> This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S10 Firmware G973FXXS3ASJA, O(8.x), P(9.0), Q(10.0) devices with Exynos chipsets. User interaction is required to exploit this vulnerability in that the target must answer a phone call. The specific flaw exists within the Call Control Setup messages. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the baseband processor. Was ZDI-CAN-9658.

The post CVE-2020-8860 appeared first on CVE Vulnerability.

]]> CVE-2020-6616 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6616/ Sun, 26 Feb 2023 06:42:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6616/ Some Broadcom chips mishandle Bluetooth random-number generation because a low-entropy Pseudo Random Number Generator (PRNG) is used in situations where a Hardware Random Number Generator (HRNG) should have been used to prevent spoofing. This affects, for example, Samsung Galaxy S8, S8+, and Note8 devices with the BCM4361 chipset. The Samsung ID is SVE-2020-16882 (May 2020).

The post CVE-2020-6616 appeared first on CVE Vulnerability.

]]> Some Broadcom chips mishandle Bluetooth random-number generation because a low-entropy Pseudo Random Number Generator (PRNG) is used in situations where a Hardware Random Number Generator (HRNG) should have been used to prevent spoofing. This affects, for example, Samsung Galaxy S8, S8+, and Note8 devices with the BCM4361 chipset. The Samsung ID is SVE-2020-16882 (May 2020).

The post CVE-2020-6616 appeared first on CVE Vulnerability.

]]>