CWE
200
Advisory Published
Updated

CVE-2017-18694: Infoleak

First published: Tue Apr 07 2020(Updated: )

An issue was discovered on Samsung mobile devices with software through 2016-10-25 (Exynos5 chipsets). Attackers can read kernel addresses in the log because an incorrect format specifier is used. The Samsung ID is SVE-2016-7551 (January 2017).

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Google Android
Samsung Exynos 5250
Samsung Exynos 5260
Samsung Exynos 5410
Samsung Exynos 5420
Samsung Exynos 5422
Samsung Exynos 5430
Samsung Exynos 5800

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is CVE-2017-18694?

    CVE-2017-18694 is a vulnerability on Samsung mobile devices with software through 2016-10-25 (Exynos5 chipsets) that allows attackers to read kernel addresses in the log due to an incorrect format specifier.

  • How severe is CVE-2017-18694?

    CVE-2017-18694 has a severity score of 5.3, which is considered medium.

  • How can I check if I am affected by CVE-2017-18694?

    If you are using a Samsung mobile device with software through 2016-10-25 and Exynos5 chipsets, you may be affected by CVE-2017-18694.

  • What is the official reference for CVE-2017-18694?

    The official reference for CVE-2017-18694 is https://security.samsungmobile.com/securityUpdate.smsb.

  • How do I fix CVE-2017-18694?

    To fix CVE-2017-18694, update your Samsung mobile device software to a version released after 2016-10-25.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203