medium5.5Public exploit code
CVE-2015-7890
Multiple buffer overflows in the esa_write function in /dev/seirenin the Exynos Seiren Audio driver, as used in Samsung S6 Edge, allow local users to cause a d…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Samsung - 'seiren' Kernel Driver Buffer Overflow2015-10-28 · dos · android · Verified
Impact
Multiple buffer overflows in the esa_write function in /dev/seirenin the Exynos Seiren Audio driver, as used in Samsung S6 Edge, allow local users to cause a denial of service (memory corruption) via a large (1) buffer or (2) size parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samsung | Galaxy S6 Edge Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/134106/Samsung-Seiren-Kernel-Driver-Buffer-Overflow.html
- https://code.google.com/p/google-security-research/issues/detail?id=491
- https://www.exploit-db.com/exploits/38556/
- http://packetstormsecurity.com/files/134106/Samsung-Seiren-Kernel-Driver-Buffer-Overflow.html
- https://code.google.com/p/google-security-research/issues/detail?id=491
- https://www.exploit-db.com/exploits/38556/