CVE-2018-21070: High severity android vulnerability

Published Apr 8, 2020

Updated

An issue was discovered on Samsung mobile devices with N(7.x), O(8.0) devices (MSM8998 or SDM845 chipsets) software. An attacker can bypass Secure Boot and obtain root access because of a missing Bootloader integrity check. The Samsung ID is SVE-2018-11552 (May 2018).

Affected Software

7 affected components

Google Android=7.0

Google Android=7.1.0

Google Android=7.1.1

Google Android=7.1.2

Google Android=8.0

Qualcomm MSM8998

Qualcomm SDM845

Event History

Apr 8, 2020

CVE Published

via MITRE·05:21 PM

Data Sourced

via MITRE·05:21 PM

Description

Frequently Asked Questions

What is the severity of CVE-2018-21070?

CVE-2018-21070 has been assessed with a high severity as it allows an attacker to bypass Secure Boot and gain root access.

How do I fix CVE-2018-21070?

To fix CVE-2018-21070, users should update their Samsung mobile devices with the latest security patches provided by Samsung.

Which devices are affected by CVE-2018-21070?

CVE-2018-21070 affects Samsung mobile devices running Android N (7.x) and O (8.0) on MSM8998 or SDM845 chipsets.

What can an attacker do with CVE-2018-21070?

An attacker exploiting CVE-2018-21070 can bypass Secure Boot and potentially gain unauthorized root access to the affected devices.

When was CVE-2018-21070 reported?

CVE-2018-21070 was reported in May 2018, associated with Samsung ID SVE-2018-11552.