CVE-2017-18690

CRITICAL

9.8

Description

An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) (Exynos54xx, Exynos7420, Exynos8890, or Exynos8895 chipsets) software. There is a buffer overflow in the sensor hub. The Samsung ID is SVE-2016-7484 (January 2017).

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published4/7/2020

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

google:androidsamsung:exynos_5410samsung:exynos_5420samsung:exynos_5422samsung:exynos_5430samsung:exynos_5450samsung:exynos_7420samsung:exynos_8890samsung:exynos_8895

Weaknesses (CWE)

CWE-120

References

https://security.samsungmobile.com/securityUpdate.smsb(cve@mitre.org)

https://security.samsungmobile.com/securityUpdate.smsb(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.