First published: Tue May 29 2018(Updated: )
A malformed OMACP WAP push message can cause memory corruption on a Samsung S7 Edge device when processing the String Extension portion of the WbXml payload. This is due to an integer overflow in memory allocation for this string. The Samsung ID is SVE-2018-11463.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Samsung Mobile | =6.0 | |
Samsung Mobile | =7.0 | |
Samsung Mobile | =7.1 | |
Samsung Mobile | =7.1.1 | |
Samsung Mobile | =7.1.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-10751 is classified as a high severity vulnerability due to the potential for memory corruption.
CVE-2018-10751 affects Samsung S7 Edge devices running specific versions of the Samsung Mobile operating system, including 6.0, 7.0, 7.1, 7.1.1, and 7.1.2.
To fix CVE-2018-10751, users should ensure their device has the latest security patches from Samsung.
CVE-2018-10751 enables an attacker to exploit the vulnerability through a malformed OMACP WAP push message, potentially leading to remote code execution.
CVE-2018-10751 is caused by an integer overflow in memory allocation while processing the String Extension portion of the WbXml payload.