high7.2
CVE-2017-18649
An issue was discovered on Samsung mobile devices with N(7.x) software.
Impact
An issue was discovered on Samsung mobile devices with N(7.x) software. An attacker can boot a device with root privileges because the bootloader for the Qualcomm MSM8998 chipset lacks an integrity check of the system image, aka the "SamFAIL" issue. The Samsung ID is SVE-2017-10465 (November 2017).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Android | Versions 7.0, 7.1.0, 7.1.1, 7.1.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://androidcommunity.com/samfail-method-gives-root-access-to-samsung-galaxy-note-8-snapdragon-variant-20171009/
- https://security.samsungmobile.com/securityUpdate.smsb
- https://androidcommunity.com/samfail-method-gives-root-access-to-samsung-galaxy-note-8-snapdragon-variant-20171009/
- https://security.samsungmobile.com/securityUpdate.smsb