CVE-2017-18658
https://notcve.org/view.php?id=CVE-2017-18658
An issue was discovered on Samsung mobile devices with M(6.0) software. The multiwindow_facade API allows attackers to cause a NullPointerException and system halt via an attempted screen touch of a non-existing display. The Samsung ID is SVE-2017-9383 (August 2017). Se detectó un problema en dispositivos móviles Samsung con versión de software M(6.0). La API multiwindow_facade permite a atacantes causar un NullPointerException y detener el sistema mediante un intento de tocar la pantalla de una pantalla no existente. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-476: NULL Pointer Dereference •
CVE-2017-18659
https://notcve.org/view.php?id=CVE-2017-18659
An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.x) software. Attackers can crash system processes via a broadcast to AdaptiveDisplayColorService. The Samsung ID is SVE-2017-8290 (July 2017). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0 / 5.1), M(6.0) y N(7.x). Los atacantes pueden bloquear los procesos del sistema por medio de una transmisión a AdaptiveDisplayColorService. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-755: Improper Handling of Exceptional Conditions •
CVE-2017-18660
https://notcve.org/view.php?id=CVE-2017-18660
An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. There is a buffer overflow in tlc_server. The Samsung ID is SVE-2017-8888 (July 2017). Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.0) y N(7.x). Se presenta un desbordamiento de búfer en tlc_server. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVE-2017-18661
https://notcve.org/view.php?id=CVE-2017-18661
An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. There is a buffer overflow in process_cipher_tdea. The Samsung ID is SVE-2017-8973 (July 2017). Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.0) y N(7.x). Se presenta un desbordamiento de búfer en process_cipher_tdea. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVE-2017-18662
https://notcve.org/view.php?id=CVE-2017-18662
An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. Data outside of the rkp log buffer boundary is read, causing an information leak. The Samsung ID is SVE-2017-9109 (July 2017). Se detectó un problema en dispositivos móviles Samsung con versiones de software M(6.0) y N(7.x). Los datos fuera del límite del búfer del registro rkp se leen, causando una fuga de información. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •