CVE-2018-5210: Critical severity samsung mobile vulnerability

Published Jan 4, 2018

Updated

On Samsung mobile devices with N(7.x) software and Exynos chipsets, attackers can conduct a Trustlet stack overflow attack for arbitrary TEE code execution, in conjunction with a brute-force attack to discover unlock information (PIN, password, or pattern). The Samsung ID is SVE-2017-10733.

Affected Software

4 affected components

Samsung Samsung Mobile=7.0

Samsung Samsung Mobile=7.1

Samsung Samsung Mobile=7.1.1

Samsung Samsung Mobile=7.1.2

Event History

Jan 4, 2018

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2018-5210?

CVE-2018-5210 has a medium severity rating due to its potential to allow arbitrary TEE code execution.

How do I fix CVE-2018-5210?

To fix CVE-2018-5210, ensure that your Samsung mobile device is updated to the latest software version provided by Samsung.

Which devices are affected by CVE-2018-5210?

CVE-2018-5210 affects Samsung mobile devices running N(7.x) software versions 7.0, 7.1, 7.1.1, and 7.1.2 on Exynos chipsets.

Can CVE-2018-5210 be exploited remotely?

No, CVE-2018-5210 requires physical access to the device to exploit the vulnerability.

What are the potential impacts of CVE-2018-5210?

Exploitation of CVE-2018-5210 could lead to unauthorized access to sensitive information and compromise the integrity of the device's trusted execution environment.