CVE-2018-21072: Critical severity android vulnerability

Published Apr 8, 2020

Updated

An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.0) (Exynos chipsets) software. A kernel driver allows out-of-bounds Read/Write operations and possibly arbitrary code execution. The Samsung ID is SVE-2018-11358 (May 2018).

Affected Software

6 affected components

Google Android=6.0

Google Android=7.0

Google Android=7.1.0

Google Android=7.1.1

Google Android=7.1.2

Google Android=8.0

Event History

Apr 8, 2020

CVE Published

via MITRE·05:18 PM

Data Sourced

via MITRE·05:18 PM

Description

Frequently Asked Questions

What is the severity of CVE-2018-21072?

CVE-2018-21072 has been classified as a high severity vulnerability that could lead to arbitrary code execution.

How do I fix CVE-2018-21072?

To fix CVE-2018-21072, users should update their Samsung devices to the latest software version provided by Samsung.

What devices are affected by CVE-2018-21072?

CVE-2018-21072 affects Samsung mobile devices running Android versions 6.0 (Marshmallow), 7.x (Nougat), and 8.0 (Oreo) with Exynos chipsets.

What type of vulnerability is CVE-2018-21072?

CVE-2018-21072 involves an issue in a kernel driver that allows out-of-bounds Read/Write operations.

Can CVE-2018-21072 be exploited remotely?

CVE-2018-21072 may allow for arbitrary code execution, which can potentially be exploited remotely under certain conditions.