CVE-2017-18675: High severity android vulnerability
Published Apr 7, 2020
·Updated
An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) (Exynos7420 or Exynox8890 chipsets) software. The Camera application can leak uninitialized memory via ion. The Samsung ID is SVE-2016-6989 (April 2017).
Affected Software
7 affected components
Google Android=6.0
Google Android=7.0
Google Android=7.1.0
Google Android=7.1.1
Google Android=7.1.2
Samsung Exynos 7420
Samsung Exynox 8890
Event History
Apr 7, 2020
CVE Published
via MITRE·02:37 PM
Data Sourced
via MITRE·02:37 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2017-18675.
2
Which Samsung mobile devices are affected by this vulnerability?
Samsung mobile devices with M(6.0) and N(7.x) software using Exynos7420 or Exynox8890 chipsets are affected.
3
How can the Camera application leak uninitialized memory via ion?
The Camera application on affected Samsung mobile devices can leak uninitialized memory via the ion vulnerability.
4
What is the severity of CVE-2017-18675?
The severity of CVE-2017-18675 is high, with a severity value of 7.5.
5
How can I fix this vulnerability?
To fix this vulnerability, Samsung has provided a security update that can be installed via the Samsung Security Update service.