NetSight
high7.5

CVE-2017-18651

An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software.

Impact

An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. There is an Integer Overflow in process_M_SetTokenTUIPasswd during handling of a trusted application, leading to memory corruption. The Samsung IDs are SVE-2017-9008 and SVE-2017-9009 (October 2017).

Affected products

VendorProductAffected versions
GoogleAndroid
Versions 6.0, 6.0.1, 7.0, 7.1.0, 7.1.1, 7.1.2

Weakness classification

References