CVE-2017-18683: Input Validation
Published Apr 7, 2020
·Updated
An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) software. SVoice allows Hare Hunting during application installation. The Samsung ID is SVE-2016-6942 (February 2017).
Affected Software
3 affected components
Google Android=5.0
Google Android=5.1
Google Android=6.0
Event History
Apr 7, 2020
CVE Published
via MITRE·02:22 PM
Data Sourced
via MITRE·02:22 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18683?
The severity of CVE-2017-18683 is classified as high due to the impact it can have on user privacy.
2
How do I fix CVE-2017-18683?
To fix CVE-2017-18683, users should update their Samsung mobile devices to the latest available software version.
3
What devices are affected by CVE-2017-18683?
CVE-2017-18683 affects Samsung mobile devices running Android versions 5.0, 5.1, and 6.0.
4
What does CVE-2017-18683 allow an attacker to do?
CVE-2017-18683 allows an attacker to exploit the SVoice application during installation to potentially access sensitive user data.
5
When was CVE-2017-18683 disclosed?
CVE-2017-18683 was disclosed in February 2017 as part of Samsung's security updates.