CVE-2018-21049: Critical severity android vulnerability

Published Apr 8, 2020

Updated

An issue was discovered on Samsung mobile devices with N(7.x) and O(8.X) (Exynos chipsets) software. There is an arbitrary memory write in a Trustlet because a secure driver allows access to sensitive APIs. The Samsung ID is SVE-2018-12881 (November 2018).

Affected Software

6 affected components

Google Android=7.0

Google Android=7.1.0

Google Android=7.1.1

Google Android=7.1.2

Google Android=8.0

Google Android=8.1

Event History

Apr 8, 2020

CVE Published

via MITRE·05:37 PM

Data Sourced

via MITRE·05:37 PM

Description

Frequently Asked Questions

What is the severity of CVE-2018-21049?

CVE-2018-21049 is classified as a high-severity vulnerability due to arbitrary memory write in the Trustlet.

How do I fix CVE-2018-21049?

To fix CVE-2018-21049, update your affected Samsung mobile device to the latest firmware provided by Samsung.

Which devices are affected by CVE-2018-21049?

CVE-2018-21049 affects Samsung mobile devices running Android versions 7.x and 8.x on Exynos chipsets.

What type of vulnerability is CVE-2018-21049?

CVE-2018-21049 is an arbitrary memory write vulnerability affecting secure drivers in Samsung mobile devices.

Who should be concerned about CVE-2018-21049?

Users of Samsung mobile devices with affected Android versions should be concerned about CVE-2018-21049 due to potential security risks.