CVE-2018-21051: Critical severity android vulnerability
Published Apr 8, 2020
·Updated
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) (Exynos chipsets) software. There is an invalid free in the fingerprint Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2018-12853 (October 2018).
Affected Software
6 affected components
Google Android=7.0
Google Android=7.1.0
Google Android=7.1.1
Google Android=7.1.2
Google Android=8.0
Google Android=8.1
Event History
Apr 8, 2020
CVE Published
via MITRE·05:42 PM
Data Sourced
via MITRE·05:42 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-21051?
CVE-2018-21051 has been classified with a high severity due to the potential for arbitrary code execution.
2
How do I fix CVE-2018-21051?
To fix CVE-2018-21051, users should update their Samsung mobile devices to the latest available software version.
3
Which devices are affected by CVE-2018-21051?
CVE-2018-21051 affects Samsung mobile devices running Android versions 7.x and 8.x with Exynos chipsets.
4
What exploit can occur due to CVE-2018-21051?
CVE-2018-21051 allows for arbitrary code execution through an invalid free in the fingerprint Trustlet.
5
When was CVE-2018-21051 disclosed?
CVE-2018-21051 was disclosed in October 2018 as part of Samsung's security updates.