Samsung Mobile vulnerabilities

CVE-2016-4547 [HIGH] CWE-20 CVE-2016-4547: Samsung devices with Android KK(4.4), L(5.0/5.1), or M(6.0) allow attackers to cause a denial of ser Samsung devices with Android KK(4.4), L(5.0/5.1), or M(6.0) allow attackers to cause a denial of service (system crash) via a crafted system call to TvoutService_C.

CVE-2018-9142 [HIGH] CWE-20 CVE-2018-9142: On Samsung mobile devices with N(7.x) software, attackers can install an arbitrary APK in the Secure On Samsung mobile devices with N(7.x) software, attackers can install an arbitrary APK in the Secure Folder SD Card area because of faulty validation of a package signature and package name, aka SVE-2017-10932.

CVE-2018-9140 [MEDIUM] CWE-79 CVE-2018-9140: On Samsung mobile devices with M(6.0) software, the Email application allows XSS via an event attrib On Samsung mobile devices with M(6.0) software, the Email application allows XSS via an event attribute and arbitrary file loading via a src attribute, aka SVE-2017-10747.

CVE-2016-9567 [MEDIUM] CWE-200 CVE-2016-9567: The mDNIe system service on Samsung Mobile S7 devices with M(6.0) software does not properly restric The mDNIe system service on Samsung Mobile S7 devices with M(6.0) software does not properly restrict setmDNIeScreenCurtain API calls, enabling attackers to control a device's screen. This can be exploited via a crafted application to eavesdrop after phone shutdown or record a conversation. The Samsung ID is SVE-2016-6343.

CVE-2017-5217 [MEDIUM] CWE-20 CVE-2017-5217: Installing a zero-permission Android application on certain Samsung Android devices with KK(4.4), L( Installing a zero-permission Android application on certain Samsung Android devices with KK(4.4), L(5.0/5.1), and M(6.0) software can continually crash the system_server process in the Android OS. The zero-permission app will create an active install session for a separate app that it has embedded within it. The active install session of the embedded a

CVE-2016-4546 [MEDIUM] CWE-20 CVE-2016-4546: Samsung devices with Android KK(4.4) or L(5.0/5.1) allow local users to cause a denial of service (I Samsung devices with Android KK(4.4) or L(5.0/5.1) allow local users to cause a denial of service (IAndroidShm service crash) via crafted data in a service call.