CVE-2018-21054
https://notcve.org/view.php?id=CVE-2018-21054
An issue was discovered on Samsung mobile devices with M(6.0), N(7.x) and O(8.x) except exynos9610/9820 in all Platforms, M(6.0) except MSM8909 SC77xx/9830 exynos3470/5420, N(7.0) except MSM8939, N(7.1) except MSM8996 SDM6xx/M6737T software. There is an integer underflow with a resultant buffer overflow in eCryptFS. The Samsung ID is SVE-2017-11857 (September 2018). Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.0), N(7.x) y O(8.x) excepto exynos9610/9820 en todas las plataformas, M(6.0) excepto MSM8909 SC77xx/9830 exynos3470/5420, N( 7.0) excepto MSM8939, N(7.1) excepto el software MSM8996 SDM6xx/M6737T. Se presenta un desbordamiento de enteros con un desbordamiento de búfer resultante en eCryptFS. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-190: Integer Overflow or Wraparound •
CVE-2018-21063
https://notcve.org/view.php?id=CVE-2018-21063
An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.x) (Exynos chipsets) software. Keymaster has an architectural problem because tlApi in TEE is not properly protected. The Samsung ID is SVE-2018-11792 (August 2018). Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.0), N(7.x) y O(8.x) (chipsets Exynos). Keymaster presenta un problema de arquitectura porque tlApi en TEE no está protegido apropiadamente. • https://security.samsungmobile.com/securityUpdate.smsb •
CVE-2018-21065
https://notcve.org/view.php?id=CVE-2018-21065
An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.x) software. There is an integer underflow in eCryptFS because of a missing size check. The Samsung ID is SVE-2017-11855 (August 2018). Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.0), N(7.x) y O(8.x). Se presenta un desbordamiento de enteros en eCryptFS debido a una falta de comprobación de tamaño. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-191: Integer Underflow (Wrap or Wraparound) •
CVE-2018-21066
https://notcve.org/view.php?id=CVE-2018-21066
An issue was discovered on Samsung mobile devices with M(6.0) (Exynos or MediaTek chipsets) software. There is a buffer overflow in a Trustlet that can cause memory corruption. The Samsung ID is SVE-2018-11599 (July 2018). Se detectó un problema en dispositivos móviles Samsung con versión de software M(6.0) (chipsets Exynos o MediaTek). Se presenta un desbordamiento de búfer en un Trustlet que puede causar una corrupción de la memoria. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVE-2018-21067
https://notcve.org/view.php?id=CVE-2018-21067
An issue was discovered on Samsung mobile devices with M(6.0) software. There is an information disclosure in a Trustlet because an address is logged. The Samsung ID is SVE-2018-11600 (July 2018). Se detectó un problema en dispositivos móviles Samsung con versión de software M(6.0). Se presenta una divulgación de información en un Trustlet porque una dirección es registrada. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •