Samsung Galaxy S6 Edge Firmware vulnerabilities

CVE-2015-7894 [HIGH] CWE-119 CVE-2015-7894: The DCMProvider service in Samsung LibQjpeg on a Samsung SM-G925V device running build number LRX22G The DCMProvider service in Samsung LibQjpeg on a Samsung SM-G925V device running build number LRX22G.G925VVRU1AOE2 allows remote attackers to cause a denial of service (segmentation fault and process crash) and execute arbitrary code via a crafted JPG.

CVE-2015-7888 [HIGH] CWE-22 CVE-2015-7888: Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VV Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remote attackers to overwrite or create arbitrary files as the system-level user via a .. (dot dot) in the name of a file, compressed into a zipped file named cred.zip, and downloaded to /sdcard/Download.