critical9.1
CVE-2017-18648
An issue was discovered on Samsung mobile devices with KK(4.4.x), L(5.x), M(6.x), and N(7.x) software.
Impact
An issue was discovered on Samsung mobile devices with KK(4.4.x), L(5.x), M(6.x), and N(7.x) software. Arbitrary file read/write operations can occur in the locked state via a crafted MTP command. The Samsung ID is SVE-2017-10086 (November 2017).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Android | Versions 4.4, 4.4.1, 4.4.2, 4.4.3, 4.4.4, 5.0 |