CVE-2017-18685: Input Validation

Published Apr 7, 2020

Updated

An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. The InputMethod application can cause a system crash via a malformed serializable object in an Intent. The Samsung ID is SVE-2016-7123 (February 2017).

Affected Software

4 affected components

Google Android=4.4

Google Android=5.0

Google Android=5.1

Google Android=6.0

Event History

Apr 7, 2020

CVE Published

via MITRE·02:16 PM

Data Sourced

via MITRE·02:16 PM

Description

Frequently Asked Questions

What is the severity of CVE-2017-18685?

CVE-2017-18685 is classified as a high-severity vulnerability due to its potential to cause system crashes on affected devices.

How do I fix CVE-2017-18685?

To fix CVE-2017-18685, users should update their Samsung mobile devices to the latest software version provided by Samsung.

Which devices are affected by CVE-2017-18685?

CVE-2017-18685 affects Samsung mobile devices running Android versions 4.4, 5.0, 5.1, and 6.0.

What impact does CVE-2017-18685 have on users?

Users of affected devices may experience unexpected system crashes when handling malformed serializable objects in Intents.

When was CVE-2017-18685 discovered?

CVE-2017-18685 was discovered in February 2017 and is associated with Samsung's security ID SVE-2016-7123.