CVE-2018-21053: Infoleak

Published Apr 8, 2020

Updated

An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. There is Clipboard access in the lockscreen state via a physical keyboard. The Samsung ID is SVE-2018-12684 (October 2018).

Affected Software

7 affected components

Google Android=7.0

Google Android=7.1.0

Google Android=7.1.1

Google Android=7.1.2

Google Android=8.0

Google Android=8.1

Google Android=9.0

Event History

Apr 8, 2020

CVE Published

via MITRE·05:45 PM

Data Sourced

via MITRE·05:45 PM

Description

Frequently Asked Questions

What is the severity of CVE-2018-21053?

CVE-2018-21053 is rated as a high-severity vulnerability due to potential exposure of clipboard data on locked Samsung devices.

How do I fix CVE-2018-21053?

To mitigate CVE-2018-21053, users should update their Samsung device to the latest available software version that addresses this vulnerability.

Which devices are affected by CVE-2018-21053?

CVE-2018-21053 affects Samsung mobile devices running Android N (7.x), O (8.x), and P (9.0) software versions.

What is the nature of the vulnerability in CVE-2018-21053?

CVE-2018-21053 allows unauthorized access to the clipboard data while the device is in a locked state using a physical keyboard.

When was CVE-2018-21053 reported?

CVE-2018-21053 was reported in October 2018, along with the associated Samsung ID SVE-2018-12684.