CVE-2018-21063: Critical severity android vulnerability

Published Apr 8, 2020

Updated

An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.x) (Exynos chipsets) software. Keymaster has an architectural problem because tlApi in TEE is not properly protected. The Samsung ID is SVE-2018-11792 (August 2018).

Affected Software

7 affected components

Google Android=6.0

Google Android=7.0

Google Android=7.1.0

Google Android=7.1.1

Google Android=7.1.2

Google Android=8.0

Google Android=8.1

Event History

Apr 8, 2020

CVE Published

via MITRE·05:28 PM

Data Sourced

via MITRE·05:28 PM

Description

Frequently Asked Questions

What is the severity of CVE-2018-21063?

CVE-2018-21063 has been classified as a high severity vulnerability due to its potential for exploitation in affected Samsung mobile devices.

How do I fix CVE-2018-21063?

To mitigate CVE-2018-21063, it is recommended to apply the latest security updates provided by Samsung for your specific device model.

Which devices are affected by CVE-2018-21063?

CVE-2018-21063 affects Samsung mobile devices running Android versions 6.0, 7.x, and 8.x on Exynos chipsets.

What is the nature of the vulnerability in CVE-2018-21063?

CVE-2018-21063 is an architectural issue in Keymaster due to inadequate protection of tlApi within the Trusted Execution Environment (TEE).

When was CVE-2018-21063 disclosed?

CVE-2018-21063 was disclosed in August 2018 as part of Samsung's security updates.