CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2015-5524
https://notcve.org/view.php?id=CVE-2015-5524
10 Apr 2020 — An issue was discovered on Samsung mobile devices with KK(4.4) and later software through 2015-05-13. There is a buffer overflow in datablock_write because the amount of received data is not validated. The Samsung ID is SVE-2015-4018 (December 2015). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4) y posteriores hasta 13-05-2015. Se presenta un desbordamiento del búfer en datablock_write porque la cantidad de datos recibidos no es validada. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2018-21055
https://notcve.org/view.php?id=CVE-2018-21055
08 Apr 2020 — An issue was discovered on Samsung mobile devices with N(7.0) (Qualcomm models using MSM8996 chipsets) software. A device can be rooted with a custom image to execute arbitrary scripts in the INIT context. The Samsung ID is SVE-2018-11940 (September 2018). Se detectó un problema en dispositivos móviles Samsung con versiones de software N(7.0) (modelos Qualcomm que usan chipsets MSM8996). Un dispositivo puede ser rooteado con una imagen personalizada para ejecutar scripts arbitrarios en el contexto INIT. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-20: Improper Input Validation •
CVSS: 9.8EPSS: 0%CPEs: 23EXPL: 0CVE-2018-21054
https://notcve.org/view.php?id=CVE-2018-21054
08 Apr 2020 — An issue was discovered on Samsung mobile devices with M(6.0), N(7.x) and O(8.x) except exynos9610/9820 in all Platforms, M(6.0) except MSM8909 SC77xx/9830 exynos3470/5420, N(7.0) except MSM8939, N(7.1) except MSM8996 SDM6xx/M6737T software. There is an integer underflow with a resultant buffer overflow in eCryptFS. The Samsung ID is SVE-2017-11857 (September 2018). Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.0), N(7.x) y O(8.x) excepto exynos9610/9820 en todas las p... • https://security.samsungmobile.com/securityUpdate.smsb • CWE-190: Integer Overflow or Wraparound •
CVSS: 4.6EPSS: 0%CPEs: 7EXPL: 0CVE-2018-21053
https://notcve.org/view.php?id=CVE-2018-21053
08 Apr 2020 — An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. There is Clipboard access in the lockscreen state via a physical keyboard. The Samsung ID is SVE-2018-12684 (October 2018). Se detectó un problema en dispositivos móviles Samsung con versiones de software N(7.x), O(8.x) y P(9.0). Se presenta un acceso al Clipboard en el estado de pantalla de bloqueo por medio de un teclado físico. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 10.0EPSS: 0%CPEs: 7EXPL: 0CVE-2018-21057
https://notcve.org/view.php?id=CVE-2018-21057
08 Apr 2020 — An issue was discovered on Samsung mobile devices with N(7.x) O(8.x, and P(9.0) (Exynos chipsets) software. There is a stack-based buffer overflow in the Shannon Baseband. The Samsung ID is SVE-2018-12757 (September 2018). Se detectó un problema en dispositivos móviles Samsung con versiones de software N(7.x), O(8.x) y P(9.0) (chipsets Exynos). Se presenta un desbordamiento de búfer en la región stack de la memoria en Shannon Baseband. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-787: Out-of-bounds Write •
CVSS: 9.8EPSS: 0%CPEs: 5EXPL: 0CVE-2018-21058
https://notcve.org/view.php?id=CVE-2018-21058
08 Apr 2020 — An issue was discovered on Samsung mobile devices with N(7.0), O(8.0) (exynos7420 or Exynos 8890/8996 chipsets) software. Cache attacks can occur against the Keymaster AES-GCM implementation because T-Tables are used; the Cryptography Extension (CE) is not used. The Samsung ID is SVE-2018-12761 (September 2018). Se detectó un problema en dispositivos móviles Samsung con versiones de software N(7.0), O(8.0) (exynos7420 o Exynos 8890/8996). Ataques de la memoria Caché pueden ocurrir contra la implementación K... • https://security.samsungmobile.com/securityUpdate.smsb • CWE-327: Use of a Broken or Risky Cryptographic Algorithm •
CVSS: 10.0EPSS: 0%CPEs: 6EXPL: 0CVE-2018-21052
https://notcve.org/view.php?id=CVE-2018-21052
08 Apr 2020 — An issue was discovered on Samsung mobile devices with N(7.x) and O(8.X) (Exynos chipsets) software. There is incorrect usage of shared memory in the vaultkeeper Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2018-12855 (October 2018). Se detectó un problema en dispositivos móviles Samsung con versiones de software N(7.x) y O(8.x) (chipsets Exynos). Se presenta un uso incorrecto de la memoria compartida en el Trustlet vaultkeeper, conllevando a una ejecución de código arbitraria. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 0CVE-2018-21059
https://notcve.org/view.php?id=CVE-2018-21059
08 Apr 2020 — An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. There is Clipboard content visibility in the locked state via the emergency contact picker. The Samsung ID is SVE-2018-11806 (September 2018). Se detectó un problema en dispositivos móviles Samsung con versiones de software N(7.x) y O(8.x). Se presenta una visibilidad del contenido del Clipboard en el estado bloqueado por medio del selector de contactos de emergencia. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 10.0EPSS: 0%CPEs: 6EXPL: 0CVE-2018-21051
https://notcve.org/view.php?id=CVE-2018-21051
08 Apr 2020 — An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) (Exynos chipsets) software. There is an invalid free in the fingerprint Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2018-12853 (October 2018). Se detectó un problema en dispositivos móviles Samsung con versión de software N(7.x) y O (8.x) (chipsets Exynos). Se presenta una liberación no válida en el Trustlet fingerprint, conllevando a una ejecución de código arbitraria. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') •
CVSS: 10.0EPSS: 0%CPEs: 6EXPL: 0CVE-2018-21050
https://notcve.org/view.php?id=CVE-2018-21050
08 Apr 2020 — An issue was discovered on Samsung mobile devices with N(7.x) and O(8.X) (Exynos chipsets) software. There is a Buffer overflow in the esecomm Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2018-12852 (October 2018). Se detectó un problema en dispositivos móviles Samsung con versiones de software N(7.x) y O(8.x) (chipsets Exynos). Se presenta un desbordamiento del Búfer en el Trustlet esecomm, conllevando a una ejecución de código arbitraria. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •