CVE-2018-9139: Buffer Overflow

Published Mar 30, 2018

Updated

On Samsung mobile devices with N(7.x) software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165.

Affected Software

4 affected components

Samsung Samsung Mobile=7.0

Samsung Samsung Mobile=7.1

Samsung Samsung Mobile=7.1.1

Samsung Samsung Mobile=7.1.2

Event History

Mar 30, 2018

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Data Sourced

via NVD·08:29 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2018-9139?

CVE-2018-9139 is classified as a high severity vulnerability due to the potential for arbitrary code execution in a privileged process.

How do I fix CVE-2018-9139?

To fix CVE-2018-9139, users should update their Samsung mobile devices to the latest software version provided by Samsung.

Which devices are affected by CVE-2018-9139?

CVE-2018-9139 affects Samsung mobile devices running versions 7.0, 7.1, 7.1.1, and 7.1.2 of the Samsung mobile operating system.

What type of vulnerability is CVE-2018-9139?

CVE-2018-9139 is a buffer overflow vulnerability that can allow an attacker to execute code in a privileged process.

When was CVE-2018-9139 disclosed?

CVE-2018-9139 was disclosed as part of a security update addressing vulnerabilities in Samsung mobile software.