CVSS: 9.8EPSS: 0%CPEs: 5EXPL: 0CVE-2018-21058
https://notcve.org/view.php?id=CVE-2018-21058
An issue was discovered on Samsung mobile devices with N(7.0), O(8.0) (exynos7420 or Exynos 8890/8996 chipsets) software. Cache attacks can occur against the Keymaster AES-GCM implementation because T-Tables are used; the Cryptography Extension (CE) is not used. The Samsung ID is SVE-2018-12761 (September 2018). Se detectó un problema en dispositivos móviles Samsung con versiones de software N(7.0), O(8.0) (exynos7420 o Exynos 8890/8996). Ataques de la memoria Caché pueden ocurrir contra la implementación Keymaster AES-GCM porque son usadas T-Tables; la Cryptography Extension (CE) no es usada. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-327: Use of a Broken or Risky Cryptographic Algorithm •
CVSS: 5.5EPSS: 0%CPEs: 6EXPL: 0CVE-2018-21076
https://notcve.org/view.php?id=CVE-2018-21076
An issue was discovered on Samsung mobile devices with N(7.x) (Exynos8890/8895 chipsets) software. There is information disclosure (a KASLR offset) in the Secure Driver via a modified trustlet. The Samsung ID is SVE-2017-10987 (April 2018). Se detectó un problema en dispositivos móviles Samsung con versión de software N(7.x) (chipsets Exynos8890/8895). Se presenta una divulgación de información (un desplazamiento de KASLR) en el Controlador Seguro por medio de un trustlet modificado. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 3.3EPSS: 0%CPEs: 4EXPL: 0CVE-2018-21043
https://notcve.org/view.php?id=CVE-2018-21043
An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 9810 chipsets) software. There is information disclosure about a kernel pointer in the g2d_drv driver because of logging. The Samsung ID is SVE-2018-13035 (December 2018). Se detectó un problema en dispositivos móviles Samsung con versiones de software O(8.x) y P(9.0) (chipsets Exynos 9810). Se presenta una divulgación de información sobre un puntero de kernel en el controlador g2d_drv debido al registro. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 8.1EPSS: 0%CPEs: 4EXPL: 0CVE-2018-21040
https://notcve.org/view.php?id=CVE-2018-21040
An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 9810 chipsets) software. There is a race condition with a resultant use-after-free in the g2d driver. The Samsung ID is SVE-2018-12959 (December 2018). Se detectó un problema en dispositivos móviles Samsung con versiones de software O(8.x) y P(9.0) (chipsets Exynos 9810). Se presenta una condición de carrera con un uso de la memoria previamente liberada resultante en el controlador g2d. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CWE-416: Use After Free •
CVSS: 7.5EPSS: 0%CPEs: 7EXPL: 0CVE-2017-18675
https://notcve.org/view.php?id=CVE-2017-18675
An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) (Exynos7420 or Exynox8890 chipsets) software. The Camera application can leak uninitialized memory via ion. The Samsung ID is SVE-2016-6989 (April 2017). Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.0) y N(7.x) (Exynos7420 o Exynox8890). La aplicación Camera puede filtrar memoria no inicializada por medio de ion. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-772: Missing Release of Resource after Effective Lifetime •