CVEvulnerability
CVE-2017-18662
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-04-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-119
Description
An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. Data outside of the rkp log buffer boundary is read, causing an information leak. The Samsung ID is SVE-2017-9109 (July 2017).
Affected configurations
• google android 6.0
• google android 7.0
• google android 7.1.0
• google android 7.1.1
• google android 7.1.2
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- https://security.samsungmobile.com/securityUpdate.smsb Vendor Advisory
- https://security.samsungmobile.com/securityUpdate.smsb Vendor Advisory