high7.8Public exploit code
CVE-2015-7892
Stack-based buffer overflow in the m2m1shot_compat_ioctl32 function in the Samsung m2m1shot driver framework, as used in Samsung S6 Edge, allows local users to…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Samsung - 'm2m1shot' Kernel Driver Buffer Overflow2015-10-28 · dos · android · Verified
Impact
Stack-based buffer overflow in the m2m1shot_compat_ioctl32 function in the Samsung m2m1shot driver framework, as used in Samsung S6 Edge, allows local users to have unspecified impact via a large data.buf_out.num_planes value in an ioctl call.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samsung | M2m1shot Driver | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/134108/Samsung-M2m1shot-Kernel-Driver-Buffer-Overflow.html
- https://code.google.com/p/google-security-research/issues/detail?id=493
- https://www.exploit-db.com/exploits/38555/
- http://packetstormsecurity.com/files/134108/Samsung-M2m1shot-Kernel-Driver-Buffer-Overflow.html
- https://code.google.com/p/google-security-research/issues/detail?id=493
- https://www.exploit-db.com/exploits/38555/