Samsung Mobile 7.0

CPE Details

Samsung Mobile 7.0
7.0
2016-12-19
16h47 +00:00
2016-12-19
16h47 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:o:samsung:samsung_mobile:7.0:*:*:*:*:*:*:*

Informations

Vendor

samsung

Product

samsung_mobile

Version

7.0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2018-10751 2018-05-29 18h00 +00:00 A malformed OMACP WAP push message can cause memory corruption on a Samsung S7 Edge device when processing the String Extension portion of the WbXml payload. This is due to an integer overflow in memory allocation for this string. The Samsung ID is SVE-2018-11463.
5.3
Medium
CVE-2018-9139 2018-03-30 06h00 +00:00 On Samsung mobile devices with N(7.x) software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165.
9.8
Critical
CVE-2018-9141 2018-03-30 06h00 +00:00 On Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software, Gallery allows remote attackers to execute arbitrary code via a BMP file with a crafted resolution, aka SVE-2017-11105.
7.8
High
CVE-2018-9142 2018-03-30 06h00 +00:00 On Samsung mobile devices with N(7.x) software, attackers can install an arbitrary APK in the Secure Folder SD Card area because of faulty validation of a package signature and package name, aka SVE-2017-10932.
7
High
CVE-2018-9143 2018-03-30 06h00 +00:00 On Samsung mobile devices with M(6.0) and N(7.x) software, a heap overflow in the sensorhub binder service leads to code execution in a privileged process, aka SVE-2017-10991.
9.8
Critical
CVE-2017-18020 2018-01-04 05h00 +00:00 On Samsung mobile devices with L(5.x), M(6.x), and N(7.x) software and Exynos chipsets, attackers can execute arbitrary code in the bootloader because S Boot omits a size check during a copy of ramfs data to memory. The Samsung ID is SVE-2017-10598.
8.4
High
CVE-2018-5210 2018-01-04 05h00 +00:00 On Samsung mobile devices with N(7.x) software and Exynos chipsets, attackers can conduct a Trustlet stack overflow attack for arbitrary TEE code execution, in conjunction with a brute-force attack to discover unlock information (PIN, password, or pattern). The Samsung ID is SVE-2017-10733.
8.1
High
CVE-2015-7896 2017-08-24 18h00 +00:00 LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service (memory corruption and SIGSEGV) via a crafted image file.
6.5
Medium
CVE-2015-7895 2017-06-27 18h00 +00:00 Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).
5.5
Medium
CVE-2015-7898 2017-06-27 18h00 +00:00 Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).
5.5
Medium
CVE-2017-7978 2017-04-19 22h00 +00:00 Samsung Android devices with L(5.0/5.1), M(6.0), and N(7.x) software allow attackers to obtain sensitive information by reading a world-readable log file after an unexpected reboot. The Samsung ID is SVE-2017-8290.
7.5
High
CVE-2017-5538 2017-03-23 15h00 +00:00 The kbase_dispatch function in arm/t7xx/r5p0/mali_kbase_core_linux.c in the GPU driver on Samsung devices with M(6.0) and N(7.0) software and Exynos AP chipsets allows attackers to have unspecified impact via unknown vectors, which trigger an out-of-bounds read, aka SVE-2016-6362.
9.8
Critical
CVE-2017-5350 2017-01-12 05h06 +00:00 Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allow attackers to crash systemUI by leveraging incomplete exception handling. The Samsung ID is SVE-2016-7122.
7.5
High
CVE-2016-9965 2016-12-16 08h02 +00:00 Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7119.
9.8
Critical
CVE-2016-9966 2016-12-16 08h02 +00:00 Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7120.
9.8
Critical
CVE-2016-9967 2016-12-16 08h02 +00:00 Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7121.
9.8
Critical