
CVE-2017-18678
https://notcve.org/view.php?id=CVE-2017-18678
07 Apr 2020 — An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.x) software. An attacker can crash system processes via a Serializable object because of missing exception handling. The Samsung IDs are SVE-2017-8109, SVE-2017-8110, SVE-2017-8115, SVE-2017-8118, and SVE-2017-8119 (April 2017). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0 / 5.1), M(6.0) y N(7.x). Un atacante puede bloquear los procesos del sistema por medio de un ob... • https://security.samsungmobile.com/securityUpdate.smsb • CWE-755: Improper Handling of Exceptional Conditions •

CVE-2017-18680
https://notcve.org/view.php?id=CVE-2017-18680
07 Apr 2020 — An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) (tablets) software. The lockscreen interface allows Add User actions, leading to an unintended ability to access user data in external storage. The Samsung ID is SVE-2016-7797 (March 2017). Se detectó un problema en dispositivos móviles Samsung con versión de software L(5.0 / 5.1) y M(6.0) (tablets). La interfaz de pantalla de bloqueo permite acciones Add User, conllevando a una capacidad no deseada de acceder a los datos del usuar... • https://security.samsungmobile.com/securityUpdate.smsb • CWE-20: Improper Input Validation •

CVE-2017-18682
https://notcve.org/view.php?id=CVE-2017-18682
07 Apr 2020 — An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. Because of incorrect exception handling and an unprotected intent, AudioService can cause a system crash, The Samsung IDs are SVE-2017-8114, SVE-2017-8116, and SVE-2017-8117 (March 2017). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0 / 5.1), M(6.0) y N(7.0). Debido al manejo incorrecto de excepciones y un intent desprotegido, AudioService puede causar un ... • https://security.samsungmobile.com/securityUpdate.smsb • CWE-755: Improper Handling of Exceptional Conditions •

CVE-2017-18683
https://notcve.org/view.php?id=CVE-2017-18683
07 Apr 2020 — An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) software. SVoice allows Hare Hunting during application installation. The Samsung ID is SVE-2016-6942 (February 2017). Se detectó un problema en dispositivos móviles Samsung con versiones de software L(5.0 / 5.1) y M(6.0). SVoice permite un Hare Hunting durante la instalación de la aplicación. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-20: Improper Input Validation •

CVE-2017-18684
https://notcve.org/view.php?id=CVE-2017-18684
07 Apr 2020 — An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) software. SVoice allows provider seizure via an application that uses a custom provider. The Samsung ID is SVE-2016-6942 (February 2017). Se detectó un problema en dispositivos móviles Samsung con versiones de software L(5.0 / 5.1) y M(6.0). SVoice permite la incautación de proveedores por medio de una aplicación que usa un proveedor personalizado. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-20: Improper Input Validation •

CVE-2017-18685
https://notcve.org/view.php?id=CVE-2017-18685
07 Apr 2020 — An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. The InputMethod application can cause a system crash via a malformed serializable object in an Intent. The Samsung ID is SVE-2016-7123 (February 2017). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0 / 5.1) y M(6.0). La aplicación InputMethod puede causar un bloqueo del sistema por medio de un objeto serializable malformado en un Intent. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-20: Improper Input Validation •

CVE-2017-18687
https://notcve.org/view.php?id=CVE-2017-18687
07 Apr 2020 — An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. An attacker can obtain the full pathnames of sdcard files by reading the system protected log upon reception of a certain intent. The Samsung ID is SVE-2016-7183 (January 2017). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0 / 5.1), M(6.0) y N(7.0). Un atacante puede obtener los nombres completos de las rutas de los archivos sdcard mediante la lectura del ... • https://security.samsungmobile.com/securityUpdate.smsb • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVE-2017-18688
https://notcve.org/view.php?id=CVE-2017-18688
07 Apr 2020 — An issue was discovered on Samsung mobile devices with L(5.1), M(6.0), and N(7.0) software. There is an information disclosure (of memory locations outside a buffer) via /dev/dsm_ctrl_dev. The Samsung ID is SVE-2016-7340 (January 2017). Se detectó un problema en dispositivos móviles Samsung con versiones de software L(5.1), M(6.0) y N(7.0). Se presenta una divulgación de información (de ubicaciones de memoria fuera de un búfer) por medio de /dev/dsm_ctrl_dev. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-125: Out-of-bounds Read •

CVE-2017-18690
https://notcve.org/view.php?id=CVE-2017-18690
07 Apr 2020 — An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) (Exynos54xx, Exynos7420, Exynos8890, or Exynos8895 chipsets) software. There is a buffer overflow in the sensor hub. The Samsung ID is SVE-2016-7484 (January 2017). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0 / 5.1), M(6.0) y N(7.0) (Exynos54xx, Exynos7420, Exynos8890 o Exynos8895). Se presenta un desbordamiento del búfer en el sensor hub. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •

CVE-2017-18693
https://notcve.org/view.php?id=CVE-2017-18693
07 Apr 2020 — An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. There is a buffer overflow in the fps sysfs entry. The Samsung ID is SVE-2016-7510 (January 2017). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0/5.1), M(6.0) y N(7.0). Se presenta un desbordamiento de búfer en la entrada fps sysfs. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •