First published: Tue Apr 07 2020(Updated: )
An issue was discovered on Samsung mobile devices with software through 2016-10-25 (Exynos5 chipsets). Attackers can read kernel addresses in the log because an incorrect format specifier is used. The Samsung ID is SVE-2016-7551 (January 2017).
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Google Android | ||
Samsung Exynos 5250 | ||
Samsung Exynos 5260 | ||
Samsung Exynos 5410 | ||
Samsung Exynos 5420 | ||
Samsung Exynos 5422 | ||
Samsung Exynos 5430 | ||
Samsung Exynos 5800 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-18694 is a vulnerability on Samsung mobile devices with software through 2016-10-25 (Exynos5 chipsets) that allows attackers to read kernel addresses in the log due to an incorrect format specifier.
CVE-2017-18694 has a severity score of 5.3, which is considered medium.
If you are using a Samsung mobile device with software through 2016-10-25 and Exynos5 chipsets, you may be affected by CVE-2017-18694.
The official reference for CVE-2017-18694 is https://security.samsungmobile.com/securityUpdate.smsb.
To fix CVE-2017-18694, update your Samsung mobile device software to a version released after 2016-10-25.